Extracted

• • Target

    fb0f1d2a581562edc3d7b97a0976c302fe9429a986e9db82c9b4c4ac13f63b35

  • Size

    395KB

  • MD5

    c5c99abeee15a1b9232abad5a07ec628

  • SHA1

    ae94aac92dfd00306a9165fca2f6418c2dfc716f

  • SHA256

    fb0f1d2a581562edc3d7b97a0976c302fe9429a986e9db82c9b4c4ac13f63b35

  • SHA512

    2da0b01284acf79b36c5c85eb58be12e61e9293e32d175134b6bd91cbe09fd27e8011507ce0524ba955df749ddb5f33bea999b6e90572dc4717484e16d837d83

  • SSDEEP

    6144:1Kz/A9CcS2s4y70u4HXs4yr0u490u4Ds4yvW8l0:0rA9rM4O0dHc4i0d90dA4N

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2