Extracted

• • Target

    1e3664e0415fd3d2b1b141a932701715ba38c7e40d0fa31c8dcae9b7cb1c9d9a

  • Size

    55KB

  • MD5

    42c6d8871cd4429439fb8a2049447dbc

  • SHA1

    8329618c36f07132752f0196c75d5068eae3d849

  • SHA256

    1e3664e0415fd3d2b1b141a932701715ba38c7e40d0fa31c8dcae9b7cb1c9d9a

  • SHA512

    5192e07fa6017ed719cffa34e7dc2cdb4aea879b805bafc8db57acb32004c1145e89d7380758ea1748d8caf7ad806ad75921396c25e1da6fe7aeca7272588745

  • SSDEEP

    1536:F+reujmD7SP+hlq3rycMN/Cf9NSoNSd0A3shxD6:F+hmH+0AYZY9NXNW0A8hh

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2