Extracted

• • Target

    1bf71f50737d4b3e33873d475d790bcaee47c16da9282186cf506d2d4388cde6

  • Size

    101KB

  • MD5

    ec7efc511c7718292b5b80f9b90e267b

  • SHA1

    bbd214b21b7c3200342ed4a737964401a69847c0

  • SHA256

    1bf71f50737d4b3e33873d475d790bcaee47c16da9282186cf506d2d4388cde6

  • SHA512

    7f0c8b1cb374a916ceee0e5cfe50a2f4d9f969a58726869d8f0e8527f19c879a7de031a1a4c639935fdcd4c51910eaec198b23a6211888501ed7588a80ca55ae

  • SSDEEP

    3072:8IXaPLls0vmzWjEduXqbyu0sY7q5AnrHY4vDX:34lj853Anr44vDX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2