Extracted

• • Target

    bdd860fa51dc643b60d9086401fc17414ec8162c2bc05de164d4f2a6bdefad06

  • Size

    335KB

  • MD5

    35111af1c47afa9e42329ef772160a2b

  • SHA1

    5e92309bfd1220285e4b1c21a309eb357190d501

  • SHA256

    bdd860fa51dc643b60d9086401fc17414ec8162c2bc05de164d4f2a6bdefad06

  • SHA512

    8d26b8ac89f79952f02306a402f40a451b9cfbdbd273532102512d687603d7e88cbdb2dbee5f134e7ae5b58d18204d0baa05521110e8f30fbcde6275aec32bd4

  • SSDEEP

    6144:1mMHUdDvLvwU/4qwvwU/4qvvwevwU/4q+vwk/4q7:1m5

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2