Extracted

• • Target

    0837721accfa2f9b303f07a9453902cc73507f19794844dfd9d487a98e22bd01N

  • Size

    72KB

  • MD5

    157596b04e74b27de49115b32a2c2880

  • SHA1

    5b63622eff8110e93413894a3fde10515d0a3fcc

  • SHA256

    0837721accfa2f9b303f07a9453902cc73507f19794844dfd9d487a98e22bd01

  • SHA512

    57fc5dd7574d9df0850585850737b59661c65ec77a05259cbb91b18cc4ca84544053e3d04c914f0d36c83903f54f4c940712c091c334a4fed056dc53d552d7c0

  • SSDEEP

    1536:Yqm5A3CIpOLaxxRXHLT57YPgUN3QivEtA:YqQlaPrhYPgU5QJA

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2