Extracted

• • Target

    49734adeb7728d058f78ccd3b4c27b90e0b41bd1faceb9b61af28ca105bd28fd

  • Size

    113KB

  • MD5

    db3710030c1fb561bcfeb983a1e7025c

  • SHA1

    163b2790b2bf016c20152025fae1cb9ea6c49e37

  • SHA256

    49734adeb7728d058f78ccd3b4c27b90e0b41bd1faceb9b61af28ca105bd28fd

  • SHA512

    123c5407d26d24ca06b096d7005d1ed9740c2b7f48c6952e0d801a7dd95806ed2086a7d7241115e3dcdc30a26a6945f99e0be5ae97dcb653918d33758de8b286

  • SSDEEP

    3072:/eYTr35NxWu8jrOuGkZFfFSebHWrH8wTW0:Fn5NxX8jy7otSeWrP

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2