Extracted

• • Target

    3297cf53dbf241687fcd809675ead439141efd684305e5339b16bcbc980fcc7a

  • Size

    385KB

  • MD5

    9c4c72c2036403532d9cc409fee944b4

  • SHA1

    e16231802e288b17adfc63f271ca601ed36540d7

  • SHA256

    3297cf53dbf241687fcd809675ead439141efd684305e5339b16bcbc980fcc7a

  • SHA512

    78befb7d07718a2d60d47c838ab5392b898ff69e1ba37504e351fe08e039090cbe699e47018d39a7c8fb6b6666c57455c06283d8d68dacf09e142b4ffa84dc7b

  • SSDEEP

    6144:yx+JMrsFj5tT3sFKDWEh7YsGsFj5tT3sFK6:ycJ8s15tLsKWEhcps15tLs9

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2