Extracted

• • Target

    9e91dc4c17f7186c3ba6428439f387d6bbbe379a34202bf7951218db3438b599

  • Size

    512KB

  • MD5

    d6ad998775b02db10a15a4f12c61d035

  • SHA1

    e0193e146c318d6ebe59816e6b625d60de293a30

  • SHA256

    9e91dc4c17f7186c3ba6428439f387d6bbbe379a34202bf7951218db3438b599

  • SHA512

    8e517198cb1d243aeb46f9a720d9ef1bd09e760da192532450e20b01b21c14fd071c90d24cf5097574b228e13da016f3d4984005ede2f855eebdffe84d447102

  • SSDEEP

    6144:YpxY+EC2+UZP8VU5tTO/ENURQPTlyl48pArv8kEVS1aHr:YpxYnDUG5t1sI5yl48pArv8o4L

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2