Extracted

• • Target

    8bb6d716c532175aab410cc659e7572d5d2e4b120b4b5b38e300d5b897f09f51

  • Size

    64KB

  • MD5

    9e39c4312f389d2bbdcb325b9a6a43c7

  • SHA1

    60e21742a268fd362700e59d3fee2f11396a6639

  • SHA256

    8bb6d716c532175aab410cc659e7572d5d2e4b120b4b5b38e300d5b897f09f51

  • SHA512

    e0d3b7af9a9e60a874caba4f0dad51bf76bd08e1567735fb9f1ffe081ffa5e821e56487f035167fca53242733064163af696cb3482c68642b2833cdb267b3a9d

  • SSDEEP

    1536:6i5HJCl/PxBFuEpi+vYzyROHcq9JekjY/Y4szUXruCHcpzt/Idn:6eQBXuEptqyROHcq3FlRpFwn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2