Extracted

• • Target

    5c8f7df114589b849be62f8c07eda05fcd1c822e07300c51c8467297a2883dd0

  • Size

    128KB

  • MD5

    421b4e74d7b26cb189e803bb064af094

  • SHA1

    92f94d73d3048db19f8f47323e230de36e9b8485

  • SHA256

    5c8f7df114589b849be62f8c07eda05fcd1c822e07300c51c8467297a2883dd0

  • SHA512

    c40c3d0a57e2c80248e76a367b61c236955919f39cc624db909ebc4c29ca882a564bb049bc7ec7469adb78a5379d69d37e5b7ab4a3a7b0e13b64170b644cac2c

  • SSDEEP

    3072:fQcR8+pulyMCREXdXNKT1ntPG9poDrFDHZtOgl:TFyyDCN9Otopg5tTl

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2