Extracted

• • Target

    c9a3e152cc5fa3a72371eac327c8d92fd3cbf44f73493836a4e096f452379925

  • Size

    64KB

  • MD5

    e59b2dae8a80075cf297092938d54b30

  • SHA1

    3779b206b8531b2e0c1909ce75bbaa001c35bb4a

  • SHA256

    c9a3e152cc5fa3a72371eac327c8d92fd3cbf44f73493836a4e096f452379925

  • SHA512

    43ab0ef818a189a4e8da13c1a85c0c813ae5adf242343a7602dcc8f8b0c34a05ccbcdb4dd71ebad85b8358bf956d6934d88d5b8bd28a88c98793b487932a6238

  • SSDEEP

    1536:KNO8NVfZZ8FZG8uncCv88+7nBZYsIWyvrPFW2iwTbWv:Oz81Z7eX7FW2VTbWv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2