Extracted

• • Target

    a021cf39c946a2d719fdac00cd6f6b00bb59c22c32be9b0af7c41223ba2ce564

  • Size

    64KB

  • MD5

    7033936514f8ca040e1f11c30adb2e75

  • SHA1

    ebcab3c2d51c93a82fc12b088c19346d2326b999

  • SHA256

    a021cf39c946a2d719fdac00cd6f6b00bb59c22c32be9b0af7c41223ba2ce564

  • SHA512

    bc9acce9a12459565e83673830198fa47d8247dc5bb2dd33fde7af0ca975d47aadf606f4147cdf6c98d8e75fe49f1b07c81ee1bb80686ed3f3cc09d54b934c00

  • SSDEEP

    1536:7dBVJb40itsPGdEUPyBnOhgwVvmfEWyI2rPFW2iwTbW:7dB/w83UUEvuEXpFW2VTbW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2