Extracted

• • Target

    7c6b7058bf7596cb10dad60a790b278eb07b506f11e39ef812d3cb54291100ee

  • Size

    69KB

  • MD5

    5359bedbb1439457fd9db316cf7ae774

  • SHA1

    4482ec8d7b085f175bbfe85adcf0b8126a4e513d

  • SHA256

    7c6b7058bf7596cb10dad60a790b278eb07b506f11e39ef812d3cb54291100ee

  • SHA512

    435ae3b36a82eb24ae4d6b0fbc859c284a5e292b5a8b5bee655aec40c8f4fcffc37b30c338cf8b259546e7b75e643992d3aec5794cd66aa08861fe7843b1551f

  • SSDEEP

    1536:stNpGXjoWmO6dJEChFRrDfivNein/GFZCeDAyY:stjWz61KvNFn/GFZC1yY

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2