Extracted

• • Target

    e4e42dd1e967267e359de2c7ca3c0dbd6b85ee0ad9a4f3f897ad8f8241f37cc8

  • Size

    64KB

  • MD5

    579a1d285ba400f570a4a121027e7218

  • SHA1

    edde0a04dedc553181b01a7b29430fc2de3f4b4a

  • SHA256

    e4e42dd1e967267e359de2c7ca3c0dbd6b85ee0ad9a4f3f897ad8f8241f37cc8

  • SHA512

    1f1e958cdd7eb02cdc70ef0fcfac791ceac1ccd9333d7f834307f2311990ad89dfb48c2a124c8cadc91d624da11e7d5d2d9148a91c987da543202ffcf502a1ef

  • SSDEEP

    1536:GSBiPuINpX/jTagBEoWyedrPFW2iwTbW:7BiP9jK3oXQFW2VTbW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2