Extracted

• • Target

    209dd2f3da4b631a020d8b7a300cc5b8fb70ed73aafcc9caf688149bad0e286f

  • Size

    128KB

  • MD5

    9debc18db9d1a402a641167d6b85de1a

  • SHA1

    70a8c4ae2d2aa916fee71b541a6a427035a77d5f

  • SHA256

    209dd2f3da4b631a020d8b7a300cc5b8fb70ed73aafcc9caf688149bad0e286f

  • SHA512

    71563f612c6050ce835f6303a602d158fc6e5e877dfa1150df772c0db5e8e3926e9ef3c38fd310063323785e34a4a2793e32840940b9ad61b3b57873e5fb1010

  • SSDEEP

    3072:AGvcR8h3/MvD+6Gym/PwidSX3ReDrFDHZtOgxBOXXH:AGvj3/Mv66iP7dSX3RO5tTDUX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2