Extracted

• • Target

    9751d66caf1c7cea32c45729b40cb730a7c7570b0f5d0551fb6059f7d179a291N

  • Size

    67KB

  • MD5

    3cf4c969653adf7fd2e23c06ac7c8c00

  • SHA1

    bbdde3cb7769d9814e17bfe679fcf124604741bb

  • SHA256

    9751d66caf1c7cea32c45729b40cb730a7c7570b0f5d0551fb6059f7d179a291

  • SHA512

    6042dd515905ac95d87a0df80fd49a357ca1ab7084de423307e6e2f0fcc341a3148602366a974a71ac567bb2a6d86ced6c0dad177c6af960fab1947286991bb1

  • SSDEEP

    1536:lbWhU3C3Jd4nPed0gbJD/sJifTduD4oTxw:lb6sAbD/sJibdMTxw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2