Extracted

• • Target

    5155475038f4d2f0c000262aec655c41cc0a7d3e4655a2d567871a4405667daf

  • Size

    320KB

  • MD5

    f55ff9dc063dbd29a5578e8e4467a9ec

  • SHA1

    056cd29c2c72e1fd0d3ec9e66b176b4b28b11c10

  • SHA256

    5155475038f4d2f0c000262aec655c41cc0a7d3e4655a2d567871a4405667daf

  • SHA512

    0ee7ffde90565691a06016a80bd2c329940b984e4d70f0c2a0850725cb9adb904191d0116a818de6d056fd9b39e7549a0e8b1d6ede9301490fe50b63a7c18c57

  • SSDEEP

    3072:glGe7SaKjEy8/41QUUZm8/41QrAoUZ4pWLB51jozFWLBggS2LHqN:gl17SFGZgZ0Wd/OWdPS2L8

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2