Extracted

• • Target

    fc8d3752a8e3db3d2a7341810a2557ebd99a66b8008da83390c46ee8a33a5ae9

  • Size

    55KB

  • MD5

    566e918278975f1c0e197e21c18f96a2

  • SHA1

    ad1c22740f36cafb6271a9ae86fb028b9e8ee38b

  • SHA256

    fc8d3752a8e3db3d2a7341810a2557ebd99a66b8008da83390c46ee8a33a5ae9

  • SHA512

    38dbcc17124e6b689794ee5e25bbed2c6426e105a7a79167b9d54f6afbedf6e9425a34fb90df65f683c43d8b4c7b18fdd1c21e42ca43c00f271a17b84161bf79

  • SSDEEP

    1536:YMEvjDjUZl9TBxOeVBdZ7NSoNSd0A3shxD6O:bWXox/dZ7NXNW0A8hhJ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2