Extracted

• • Target

    e1ecc0149a1242187f4fa93fbbddd1ae0856c2442c9c33f35f248b682cd2d758

  • Size

    69KB

  • MD5

    a773993f6e23879a8b3db92c6ee421ee

  • SHA1

    bb82896dab293d49eb49ae6afead023c4d325948

  • SHA256

    e1ecc0149a1242187f4fa93fbbddd1ae0856c2442c9c33f35f248b682cd2d758

  • SHA512

    13f57f78c39dab5fa4863842ab134b5dfef80514be8bbbc867440b10e738df665f9680b7c251f2c0c6eb9716b523434d7c68b33146ab22f0fc03d716ab994da9

  • SSDEEP

    1536:hniv3jSqGZDIpwIW8JEJvNein/GFZCeDAyY:eTb6c2IR61NFn/GFZC1yY

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2