Extracted

• • Target

    881e1fc18474abd4b487d85f6fd55aa35783743b104082bbb3897f56f37f34f8

  • Size

    97KB

  • MD5

    646140fa0b391499a590782ffec4647c

  • SHA1

    4be7c04893ab51595ceba220c8a3a3729e0e2d02

  • SHA256

    881e1fc18474abd4b487d85f6fd55aa35783743b104082bbb3897f56f37f34f8

  • SHA512

    22d09805d91731e684cbe2037c444c6faa9113a806966b74d83872e06ce516199a32ecb9d03b8664aed39586e0dc4a1784a85cbf0f7d3a99230c2eabe3496b8b

  • SSDEEP

    1536:0buGqanoOrm566io8Yq2SwpXUwXfzwE57pvJXeYZE:yu+non6W8Yq2SwNPzwm7pJXeKE

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2