Extracted

• • Target

    d149245021637f66604cedf711c680ea55a1d916f9325b2ea3003120d018e894

  • Size

    101KB

  • MD5

    a711a2467c80b584a331d6c9b9181f7a

  • SHA1

    b7b2556088ca51a4621781e6b6ebfb13bfd92752

  • SHA256

    d149245021637f66604cedf711c680ea55a1d916f9325b2ea3003120d018e894

  • SHA512

    481958d8e6d4aa7eb4261d22d303800f6ed2273dedae09c43e2f2f61609e073f5407feb97c8225607959206ea6ae5adbe708fd68f81755a2222ed06a72b5da23

  • SSDEEP

    3072:jYhglWrKX7VTE6PEduXqbyu0sY7q5AnrHY4vDX:jYhKWr87VTE6Pj853Anr44vDX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2