Extracted

• • Target

    faaf43c993548b6dfa0234f5bc8d55784d911f941926511e21abe968eef353b4

  • Size

    64KB

  • MD5

    33b9e2eaf0e5e5f2cc6f3214a5549261

  • SHA1

    c643af0829d8072f0aa6b5b11559acd9471ef3e3

  • SHA256

    faaf43c993548b6dfa0234f5bc8d55784d911f941926511e21abe968eef353b4

  • SHA512

    4e2ff0ce26654f8eb45a7bff2baa2d0a30e14b769667cc961f90d1ad8032a67c0b990b2f992bd9ba3ec3b04d609b1a42cd2725a96d88475fbbec4dad2fc5f0c3

  • SSDEEP

    1536:Be/eMg2IJnEQPmVu8qy5f/UK/7WXUwXfzwv:mIKQ839iPzwv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2