Extracted

• • Target

    cb86629050eff75584d2dd1cfcec023b2532832701a8f519e68bfc439a68de87

  • Size

    64KB

  • MD5

    58e242c3f02e8f949314b05e2d5c569e

  • SHA1

    ebe6c781f6a0f4ec61dc2ae0e8005a6bd8498e55

  • SHA256

    cb86629050eff75584d2dd1cfcec023b2532832701a8f519e68bfc439a68de87

  • SHA512

    4f332a2feac6caf85ccdb4a53bdfc7fde394dba2fe2121d47140de1afa18f7c2494edb15a4ee60c0142ec9dade632a3f32b7ba363e068a31833c38d39f3963d6

  • SSDEEP

    1536:BkyGWHUh53lnk9hPQpWyQPrPFW2iwTbW:FCehPyXeFW2VTbW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2