Extracted

• • Target

    852f3dd9b39deb0c99016f743192f0b94cea6bea88729c5254006588c67edf0a

  • Size

    55KB

  • MD5

    13000b7d1cfdc95eb5e48b1373bd4986

  • SHA1

    c99b2db4cf9626074fa4bc77f98cc33c3175970e

  • SHA256

    852f3dd9b39deb0c99016f743192f0b94cea6bea88729c5254006588c67edf0a

  • SHA512

    f38d0e14edecd3e6e707b57c92aeb831fc3f105fa2e65af507e00e09985e20daa1da8547809a7fdab78d96b906ec5bef0550e08b855ea0765d6b762b43a68f20

  • SSDEEP

    1536:1s30qaF6YO77qR8mxOwlhmNtXNSoNSd0A3shxD6:+31aFPKm8mHCXNXNW0A8hh

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2