Extracted

• • Target

    62d8a6678f33604b1789a3c6587281d073400e8517312fd93e00667b6543c9dcN

  • Size

    63KB

  • MD5

    a9e60610e7549f8a014d413ef70b8ed0

  • SHA1

    0caf78fc0f3c66966a5262173a154ab7c807f935

  • SHA256

    62d8a6678f33604b1789a3c6587281d073400e8517312fd93e00667b6543c9dc

  • SHA512

    b18ebdd1b034fd1a3f9c9d2cbf489839b99f3d4721ccaf83b63edd5a2f45776a8af99661f3cd17bad5404b6ff5429c4bde9fc377cd32d4ec11bd3acdf2aa3267

  • SSDEEP

    1536:LxdtgtT1xMV02c3jjPKHCPTHlHIA+VZEn9rjDHE:1ayV02kjjPKiPTH3oZk9DHE

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2