Extracted

• • Target

    c6d1a0284bf35d68b45a5357026ae9fcfc7ebf8a7d9597eff1c4e246989d8d12

  • Size

    320KB

  • MD5

    8b62ad43a8ce07d6aca962b7e4e603a8

  • SHA1

    c83b0099a6a7ca5f8968784d295cae6a2edabf0b

  • SHA256

    c6d1a0284bf35d68b45a5357026ae9fcfc7ebf8a7d9597eff1c4e246989d8d12

  • SHA512

    26a275568751b84907302684da736dda25d71b9265bb6dab36ec61f0f3cbbc7c270abdce26e7cff87039cdf0ec838a8043b78c1702aa35472b7a4cbd83daf281

  • SSDEEP

    3072:PhU2/WRICAcpJRuqy8/41QUUZm8/41QrAoUZ4pWLB51jozFWLBggS2LHqN:pybowZgZ0Wd/OWdPS2L8

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2