Extracted

• • Target

    7c2b725bf5e6c71bc794219c7e6e974fe3f302ee02f13506e154e604bae838a3N

  • Size

    194KB

  • MD5

    5841b666547ab983f2d2e175be62f340

  • SHA1

    658fa7a8528b96baa74f708cef8f73111a4fb7f2

  • SHA256

    7c2b725bf5e6c71bc794219c7e6e974fe3f302ee02f13506e154e604bae838a3

  • SHA512

    f7f25085a4f4f0f87b37ea20023826db57aa84f877944f24d60c57df5ab506c863bee9e87ed956b4bfc63a8a63a65566321e390c576e97d2dc7731892a9a2fcc

  • SSDEEP

    3072:D24btgqyWhf9AmmMIM/kEmMIGumMIc/1GV:9Rwm5/pbuh/UV

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2