Extracted

• • Target

    e4207ffb9a0aedc0a52dfa813be9aa972bcb67161479ffc1cf2551f79193b96a

  • Size

    55KB

  • MD5

    77479a0856e76390974abc5ffd0edfdc

  • SHA1

    f8e741e44233613438f4acdad41404127e7b26c1

  • SHA256

    e4207ffb9a0aedc0a52dfa813be9aa972bcb67161479ffc1cf2551f79193b96a

  • SHA512

    d0b82a5eaf30c12b3539b900e55bee9612525f4cd0fce106199cf4b9b24cbd4c70d61daef6162d35ac05d7f8202d95a4308abc7359c89c4db9d29eb1f407fef0

  • SSDEEP

    1536:k6OJ+28zqHwyzzakPMLRABNSoNSd0A3shxD6:4J/8zUwyzzakPMtABNXNW0A8hh

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2