Extracted

• • Target

    bccad5f2da6ba646ba0a56ecc65cd326a84a1efa70206a0b18834edac79269c9

  • Size

    64KB

  • MD5

    8b7e03aa741191604db47ec16d052ea6

  • SHA1

    e023330d42d99673483433d00b09efd869a78b4b

  • SHA256

    bccad5f2da6ba646ba0a56ecc65cd326a84a1efa70206a0b18834edac79269c9

  • SHA512

    043233e403430514d837f2f15b3fdfa5a450b53bec0ddc7e281a5d8e3bd4be04b67ec61410711e9c3328310b0d5e852663ec2ad507d17ac0a18488e86b5ce603

  • SSDEEP

    1536:WHk8K8ZwJxywMljpokqmEO2LuDdeWyurPFW2iwTbW:wkxywmqkXAiDAXqFW2VTbW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2