Extracted

• • Target

    dbc849898d2e7134264dbeb68cefe254f0e18865506b0ccce998b8b855063b76

  • Size

    395KB

  • MD5

    8fb6d684eaf22946186c8607be233cfc

  • SHA1

    fc1714a3ed2e5a80535a7100a24963e9640ff95f

  • SHA256

    dbc849898d2e7134264dbeb68cefe254f0e18865506b0ccce998b8b855063b76

  • SHA512

    9d8ae828efb3edaa2131f3a758417b44f5f6820f68cea433e4525e3eacefac08cd95eb47531a247cd95791cc04fb7570453e22b0eaa6524f514d15e19a5faf61

  • SSDEEP

    6144:PF5G+0mBs4y70u4HXs4yr0u490u4Ds4yvW8lM:214O0dHc4i0d90dA4X

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2