Extracted

• • Target

    26e1645dd30f1f7db28770e68da674b453b7ad108b2bcf863b2719e072b01679

  • Size

    576KB

  • MD5

    3b09941e7a2a65948a5fa451dcad43e4

  • SHA1

    c1854648b07dc4d63d4b9deea2a93fefce86437b

  • SHA256

    26e1645dd30f1f7db28770e68da674b453b7ad108b2bcf863b2719e072b01679

  • SHA512

    2ee171b66446ee0bbdd7f0d63b9dd2933e192a72e690c32f8ceda1ea4da75507a759825a4883bb10a2bfd4e9c4ea36642421ba3bef0d345c6283a399c928f3fc

  • SSDEEP

    12288:9oa1GxP/PP7PP/PP/PP3PP3PP3PPHTPPPPPPPPPPaAPPHPPPPPPF2nGyXu1jGG1R:+a1+P/PP7PP/PP/PP3PP3PP3PPHTPPPn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2