Extracted

• • Target

    4565fea21c21d7104c0cae6fbe2e496c60428919face3bab9520a1384ea2d67e

  • Size

    88KB

  • MD5

    c852dbf42432ed7d573326f4a1603269

  • SHA1

    4110768bb96d262d8a6dce2310661c4dc388fc08

  • SHA256

    4565fea21c21d7104c0cae6fbe2e496c60428919face3bab9520a1384ea2d67e

  • SHA512

    8d48a372d026897721cf8d4b84ba8e68947607325969fde9e660f80494e0eac2f9a1709f290c17580be25372fb044ca5c547e026206bb86960a34c7145ed6db9

  • SSDEEP

    1536:CqzsVuiGhcteQNhNZswFL8QOVXtE1ukVd71rFZO7+90vi:vCuhhmesNZvLi9EIIJ15ZO7Va

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2