Extracted

• • Target

    5137087931d4dc7c44b41baf27cdff72b30438b1c2757f706d591420972beafd

  • Size

    346KB

  • MD5

    cf7560a84458532327c519dc6dc0d2a6

  • SHA1

    4e92d46fad708b7c31ae35d69f40df4a431182f8

  • SHA256

    5137087931d4dc7c44b41baf27cdff72b30438b1c2757f706d591420972beafd

  • SHA512

    61d6ec0c36b49d67e43a8871f9370cdc79caf31c88f599c6c9e9752b774e77d135b40ffa6e85a056a42756afe57406205332587b029b682b6f29825220bbc305

  • SSDEEP

    6144:df5Z7afIdQRJhdsFj5t13LJhrmMsFj5tzOvfFOM:bZ7aftrhds15tFrls15tz4FT

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2