Extracted

• • Target

    07a9957411d20f0d6378864ed196a91d3a5ad8a0ff8bb9960d92303fc1a4653b

  • Size

    64KB

  • MD5

    c8d566666bc029bde5f99722ff915bf5

  • SHA1

    780a80b0e17eda6092aa604efee73493dc1797f7

  • SHA256

    07a9957411d20f0d6378864ed196a91d3a5ad8a0ff8bb9960d92303fc1a4653b

  • SHA512

    be0697ed5e11d12e49b498c1e43d8ddf48176a49c12a465e291db4fde7d8b3e6cdd4841d52c4ecc25d0fc29c0549333c52132dc4798612940cdfd3412612daa4

  • SSDEEP

    1536:ChhYONAkZaa+TgMZkspYwGbKUVcwNNDwEJRPTDrRT:ChKWgzZ8cGDrB

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2