Extracted

• • Target

    461fea4443c45d21b1251dd1cad8540e14f95542cd994d3df86f444e9ae513b8

  • Size

    108KB

  • MD5

    031f1a5437c1349effeb3e9a35c0321a

  • SHA1

    d806b4a2c5e30b11fbf5d9bd009b88fef44eaecd

  • SHA256

    461fea4443c45d21b1251dd1cad8540e14f95542cd994d3df86f444e9ae513b8

  • SHA512

    a40563cd56c67892f28448f778b3990e04247d2523ad24cfd117ad4659b89fc03b3ab43d00be03d3d176c838c1186657062c5e10be3e03d618764bb819d10bd7

  • SSDEEP

    3072:f4YBOaGh5bD/mB0vEXcUjmOiBn3w8BdTj2h3K:f4lnKxjVu3w8BdTj2VK

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2