Extracted

• • Target

    fc73f08d7d91b9a066801924881fdefff6dc6516ccd62735a2ba5c284876a841

  • Size

    64KB

  • MD5

    d622f177eedbdb664dba2e21fab8c79d

  • SHA1

    7cbb9b50e382a885302531ca63db64bc0ba93078

  • SHA256

    fc73f08d7d91b9a066801924881fdefff6dc6516ccd62735a2ba5c284876a841

  • SHA512

    33fdf7819cbcc24167f68927130fd62d53f313656a4fbc461cf9ec2b6f6808a813d300522f075f21649561573390f11f9fbc4f267adb6bdf34ece97fc70da370

  • SSDEEP

    1536:i0xxx05MKJsEzYbNW+Gcv4iUXruCHcpzt/Idn:iNCDpGcvtpFwn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2