Extracted

• • Target

    4372cf301de4c590ef7a8095f677cb320758dd1f40c4f05fd124d13ac38e7be2

  • Size

    335KB

  • MD5

    c100ab230fec4c0a7e8c03a5c7b33e99

  • SHA1

    f9b155d57c3856a5ece89101e957db4aba5884fb

  • SHA256

    4372cf301de4c590ef7a8095f677cb320758dd1f40c4f05fd124d13ac38e7be2

  • SHA512

    854f9fcb7f56bf33134a6c3f093f3752e89cc07cf03de8646ee316008b74804b7ea28aadac3ccf68575e62cd9563f887f85708d3e105a22e7af89e4d4e0fcd71

  • SSDEEP

    6144:5o6TAKrvLvwU/4qwvwU/4qvvwevwU/4q+vwk/4q7:Zb

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2