Extracted

• • Target

    a07fa36a518fc2c2385fef91be23e117e9993c9678b319b5029cc084b7e0d4c6N

  • Size

    52KB

  • MD5

    7bc196d08448e75917b578a65851aa10

  • SHA1

    55beb1e460fc96bdb3050cfe31235a5723749fbe

  • SHA256

    a07fa36a518fc2c2385fef91be23e117e9993c9678b319b5029cc084b7e0d4c6

  • SHA512

    8c2f18d037ee94034fbf510219e2f30361f47027f58c3a443a777d46381881b169f28b3b5a725380f2d93313a34719a59c777c9d8dd6984a4d33261f76d568d8

  • SSDEEP

    1536:BI07AvuhHJ+5ui46duLmd4cWBryRRMAdKZ:uuhpoui4x04ckynMRZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2