Extracted

• • Target

    0909abdc84b1c7a397364baa0a89b5d183931e88f605627535593e3659614759

  • Size

    777KB

  • MD5

    ac13777c64c63de72404f862a705c5d1

  • SHA1

    228b68229e3dd649e455f0a5a7f6204b7f0c2f74

  • SHA256

    0909abdc84b1c7a397364baa0a89b5d183931e88f605627535593e3659614759

  • SHA512

    b1d28d597e4bcff00cd18eba07327e2fe1796161f10321dfea588f12fcd8da126ae89bdc219ca3c27bbdd92d3ac04485dd28d8f1525be66e18da5c74c5d9b639

  • SSDEEP

    12288:Q0c8nl7VRMsa5TugZKS9sUvkclI0/RTObN+9LuBoT7b2v4XrGB6i/1:Qonl7V9U91RlI0/RTOR+96o77i/1

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2