Extracted

• • Target

    2200cd77feaa8357ca88f39d0bd72a05facfc40e60e3680e786203cac6d1cf18

  • Size

    64KB

  • MD5

    efd8c77a7855e3c410784e328401dbc6

  • SHA1

    d875e2b147fee1055434260ecc17dfffc958bb0d

  • SHA256

    2200cd77feaa8357ca88f39d0bd72a05facfc40e60e3680e786203cac6d1cf18

  • SHA512

    4b0ef273e300829087dfb3f4190a004f1f761890ac6ae6552a7b29126610cc9d10ff809cf9be651fa629dbfb8a7d818e7008f95b14023093c59095cb5586cedd

  • SSDEEP

    1536:8bO5dUCgT8EpugcdvdC4BT44eXdUXruCHcpzt/Idn:YOICvEPKFCIT4DpFwn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2