Extracted

• • Target

    4459fcff5e5829889f5a646b2e7e091ef876fed4cae77ca1b010c790657177ae

  • Size

    67KB

  • MD5

    edbc11f0b4f0a9f3964923415573569f

  • SHA1

    b55197b342c4b1ad0a66c85d80070c4a02e19b76

  • SHA256

    4459fcff5e5829889f5a646b2e7e091ef876fed4cae77ca1b010c790657177ae

  • SHA512

    4eeb217f92821bf354e3f343e626f81c0fdcdc55039dea1f9dd6619683bc38f0b8a84247e442704dbcc39fdf380117f5cd950fc52e7771b4f2cfdb9a141d03b9

  • SSDEEP

    1536:T5rHFSi7vy7pt2yGWn9pwIdsJifTduD4oTxw:F8i7vyGJWpwEsJibdMTxw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2