Extracted

• • Target

    bc04e132744fb8505d7aaf182c562fe585bcec17ad678267f6417708c409f664

  • Size

    88KB

  • MD5

    9c1c1ab096020357ae41dd9cfd6ae294

  • SHA1

    d31b4824e324c26b0c5be4f67b0b7619d9ae7247

  • SHA256

    bc04e132744fb8505d7aaf182c562fe585bcec17ad678267f6417708c409f664

  • SHA512

    b36e8b44c0f0ca56441341030b8533df238184d8090f2b9290b471c030f006407314096de0e8207b0d698b7519f395bfc1579be1619bbd4066d30420481a7111

  • SSDEEP

    1536:na+2oN5cF6zH9QvKOZNwFL8QOVXtE1ukVd71rFZO7+90vT:naboN5DOvvZKLi9EIIJ15ZO7Vr

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2