Extracted

• • Target

    995f12a397f425b753491ef2313d1885f098ad31701445304d3253df244ebb69

  • Size

    69KB

  • MD5

    6c25f803053e0e302f560c83b655efa9

  • SHA1

    533cc88c81ac3e09492b367bd9618044e689dfa1

  • SHA256

    995f12a397f425b753491ef2313d1885f098ad31701445304d3253df244ebb69

  • SHA512

    547ee477e8ef6d7b68e6a9ce368d1b18cc3da998045b0fde97e2d792efd0f368c80ed637954b20633cbd6ebf0b516cb886d0fbd1ab6880688b6dbb5fd4e90cb1

  • SSDEEP

    1536:26zxJYE/V1iJ9zsaIkCqmdBjJNein/GFZCeDAyY:pFJYE/V0J9dCqmTdNFn/GFZC1yY

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2