Extracted

• • Target

    ad7c58a291a458055fea52c712e073ae6f71c24a4937f41e2aa800d973617429N

  • Size

    72KB

  • MD5

    ed809576ccab71840ff2b9bc2b9028c0

  • SHA1

    469e806b360d75cd588037833f58ea1b07b92b2a

  • SHA256

    ad7c58a291a458055fea52c712e073ae6f71c24a4937f41e2aa800d973617429

  • SHA512

    897fcf01be79f6da4f715e3f7cff35034234f6a0a615c1b3159aa4ed949457bfb1e0713801a6ddf81cfdebf2128e5535656a353bb9bb0965e603d81065b23e1d

  • SSDEEP

    1536:P+yZhvilSltvbyr45Ybg56Wid1EPgUN3QivEtA:GyNtvbsbaHid1EPgU5QJA

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2