Extracted

• • Target

    39a98bf8ba0e8c922898e5f209971ff70fefdf738c2a09566b729dd5403ba760

  • Size

    55KB

  • MD5

    bc167f14e33775a0a5fbc7f4aaf0ebb5

  • SHA1

    6a890f6198444edb901f2a67955de3a21f883dd2

  • SHA256

    39a98bf8ba0e8c922898e5f209971ff70fefdf738c2a09566b729dd5403ba760

  • SHA512

    744cc1d9f551d8c72300372a6d305808a9be9af965a454d6941ba9782d4339249738af69ec9fd620b661893ea58828944011a781f6701fc8c3a7b088b3d02718

  • SSDEEP

    1536:5i9KBI7AHh96AGMPo0qV4uuRNSoNSd0A3shxD6:cKBi6D6BMPo0qV4RNXNW0A8hh

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2