Extracted

• • Target

    3aa73764cf7620f42fa1f1764403e7f42b0b068030c739c6af0845c916a5c312

  • Size

    428KB

  • MD5

    6f58b3957568c280a03441357e16cd6a

  • SHA1

    0328f1065bcd1a8a3d7f9bf98225639a8f828946

  • SHA256

    3aa73764cf7620f42fa1f1764403e7f42b0b068030c739c6af0845c916a5c312

  • SHA512

    84139ef4450edaa7a9097bdaf8e59a34e360c4f1e7ed62bbf0f452c35a08b62c941c8bec01fa76339f42d19801d876fea48cf65a6b87efa705805d382050c8f4

  • SSDEEP

    12288:iaqN45hjtFrNF5h0EJtws15tPWu5Ls15tg:X5hjLZF5h0E/Tg6

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2