Extracted

• • Target

    13480b2ff815efe550c049a6441d37ed981bb2f071b12b03122f0fbb88f2ad7f

  • Size

    181KB

  • MD5

    c1812bb16a685b665b1a00cb676b2217

  • SHA1

    03af053a357b024b05495fb737fe69c5be65df28

  • SHA256

    13480b2ff815efe550c049a6441d37ed981bb2f071b12b03122f0fbb88f2ad7f

  • SHA512

    9e77a9458a32cdad613df480c7dd57977684243faab06f4b91937059550b19bce38caae48e8b816b3809c3b236ef87be89d415d4d938987acd43eb62424af96a

  • SSDEEP

    3072:KXyMxbJDrFDHZtOg04UxSl4uO0JGDrFDHZtOg:KXyM5/5tTh7G0JW5tT

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2