Extracted

• • Target

    7a63d49d2f24988139914fd42971236fb82d7520578778e7453d757d7b2bbd87

  • Size

    512KB

  • MD5

    a675d53c8e17e9c30ae216ba6852e2d2

  • SHA1

    8e4dd80adefbb0a0301c0ddd28944b081a263d12

  • SHA256

    7a63d49d2f24988139914fd42971236fb82d7520578778e7453d757d7b2bbd87

  • SHA512

    f07ea38880f84e0ad743f26ae8a80b1d555552064fc5926ba4c6b79f1d4cca76638417890b0cfc1301bb7649af54756398ab4abd6c4e93135f6a364511aa9f05

  • SSDEEP

    6144:vBndfdrMJO853XBpnTfwNPbAvjDAcXxxXfY09cnEWPDZ:5dfdKOQBpnchWcZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2