Extracted

• • Target

    646ff5ea2073dd50a832b5e22bb60392fc3d51fc419fade6e9376a59e6568683

  • Size

    69KB

  • MD5

    a871fd15075f61f28e38f72b9438cfc5

  • SHA1

    481117607d163c001e5dc001a8db693acdd99d40

  • SHA256

    646ff5ea2073dd50a832b5e22bb60392fc3d51fc419fade6e9376a59e6568683

  • SHA512

    3520f2ee478cb19621462f557e718481c649319e4f9b3b96df486c284065e9fc27e93f650222958e61916101d2a451f362895aab0544915d0e94d3f27a72c6ee

  • SSDEEP

    1536:SjII6GeEHcoEvPMhtUfW93fNein/GFZCeDAyY:UVednvEhIW93fNFn/GFZC1yY

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2