Extracted

• • Target

    392a684692e807f490d0cb64fa09f83e1ef03480b0240acf71425517c480503f

  • Size

    64KB

  • MD5

    9e885c4673d0e95cd700606c746f8abf

  • SHA1

    5015a8ac3545fdd49d10bb11afeff2fd6ec5963d

  • SHA256

    392a684692e807f490d0cb64fa09f83e1ef03480b0240acf71425517c480503f

  • SHA512

    28779f41ed0dca0db938f782e8394f938ae58c65aa4d3c1249041a7cf780954a59e93b2a3c7b8712e2ea77cb24d2f30f001418b3884c12f990928a7cb1415fc4

  • SSDEEP

    1536:M/79mjHOTbv7BVcmPCyQ6FOM7kMCxtYBeiWyZrPFW2iwTbW:M/79+HOTJF/4MCkBtXdFW2VTbW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2