Extracted

• • Target

    36b7ba9b5c385ee8684724d59b1321ce39efb5181e0d93f1a41a45032684954a

  • Size

    59KB

  • MD5

    91131ac6c7adf88fd39ef7e154f756cf

  • SHA1

    c428ebdeb2aae73b1499e8a26a83ce7bbf23d05a

  • SHA256

    36b7ba9b5c385ee8684724d59b1321ce39efb5181e0d93f1a41a45032684954a

  • SHA512

    ba20b8a4ab545ffc0000b1a10fe1c74265a856242fed2b37296e7e26546075fa23611035e684f86f67d4da2930d2d91e36d5cc22cf99b072daf3c215fda64c4d

  • SSDEEP

    1536:bjRihL6KDDKZ/JwaPhgPE6HWF/f+8CluNCyVs:bjRA6KDw/di25f+ldes

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2