Extracted

• • Target

    911fdae67a522adf5f437c974458ec461ad982fcdf10e6368a895a45b6ba45b9

  • Size

    64KB

  • MD5

    8f1de0260f537aba4e19b04faa7d268b

  • SHA1

    888ee5885e624b2a4c9fe30edb97d83c171b0592

  • SHA256

    911fdae67a522adf5f437c974458ec461ad982fcdf10e6368a895a45b6ba45b9

  • SHA512

    e1a18f520e113fc013acc421a4e5d6d83f47edcd6c9a8af7fce0f37437ff70d7900cd744a00a774fd896573315daeef0a33c4f17fce153801a1c5c58dea043cc

  • SSDEEP

    1536:St9oBgq6kcR5JhYRLGETP9lfptOL2RgaNXUwXfzwd:xeqvcRzGRLGETXR+2uaZPzwd

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2