Extracted

• • Target

    233adf65dc98706ed8b3966fdb59703a0221fa58d561f483af3a882a06824025

  • Size

    250KB

  • MD5

    986618f3c60a95255509b99b03cc3bea

  • SHA1

    53955888332bbb7a705d35f26b9fda6cd6237e42

  • SHA256

    233adf65dc98706ed8b3966fdb59703a0221fa58d561f483af3a882a06824025

  • SHA512

    89f7e45564f40a8b87dbbd29cadaa0159c148313ee73b71ab7cc7a09a9abedf9fbd4b5fa43e9f6e1ca77042eee3e3259aae4bbd440cf8236f2720beec8de8d00

  • SSDEEP

    6144:I5vNdl/KEilvCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ7d:wF/KK

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2