Extracted

• • Target

    43896639bf92757d96eef9609fbd3d88873075e6410eb265e9fadb2b71312fc6

  • Size

    415KB

  • MD5

    4498d46293cef156abe4d4c00e5ff8f6

  • SHA1

    576dc8e8ddbad52cda1482736ba59002f6f97368

  • SHA256

    43896639bf92757d96eef9609fbd3d88873075e6410eb265e9fadb2b71312fc6

  • SHA512

    103523d330e6d250b3f129f0b81b16e5010acecf6e807ba24e13ae50b64261dc80862c2292458e2ec8c79868f9f548bb8a223b6fe88d8d8e20e1d763bdaa7f6c

  • SSDEEP

    12288:biSoWj7NtInBBBBBBBBBBBBBBBBBBBBBBBBB0kfBBBBBBBBBBBBBBBBBBBBBBBBL:uSklp

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2