Extracted

• • Target

    249ae06b30939761a05304402a30d9811d255a51d3e50e6f38301a6a7e189276

  • Size

    67KB

  • MD5

    1109937d8a4940314becd048e839b075

  • SHA1

    6a15cf73a21dac001fa448b73068e87cea7b39ed

  • SHA256

    249ae06b30939761a05304402a30d9811d255a51d3e50e6f38301a6a7e189276

  • SHA512

    3801175e6c6ab6e4b3d2e0ab47ffbb4187cafa6d5aa874dba5e1f724211703a3825af21f833a827c8151ccb00ca15634f33985379296d972a1a33903bac40514

  • SSDEEP

    1536:vf6ZTaBAMjlrlK4mSN9euoMsJifTduD4oTxw:vCZTaBoSNIursJibdMTxw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2