Extracted

• • Target

    28341f4b3bd3665ed9c67c3f3b1dfa9ee7ee1b80478acfefcbdc28acb80d32e5

  • Size

    64KB

  • MD5

    63623432bdff217b2cef60c17028cec7

  • SHA1

    4bacce1097a238bbe48316ab569b4719e1caee39

  • SHA256

    28341f4b3bd3665ed9c67c3f3b1dfa9ee7ee1b80478acfefcbdc28acb80d32e5

  • SHA512

    d32609f5c110365dd93d403d10017ccca8ede4ca63a418369c6d138075a934a9cbc2e2d03e03b9872f48d7d72d7abec24841e6fb799256c91e5e62561991df0e

  • SSDEEP

    1536:8hnFZtq9YJ7pDXsV0z4gIT3WyqhrPFW2iwTbW:8hnhq9YXXsfL3XmFW2VTbW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2