Extracted

• • Target

    7586ea2cdf5721eafdca4e8765a883973bb851a23a2026ec4c6f4e8382ed9890N

  • Size

    52KB

  • MD5

    7653a3ed8ad15f56ba4cb2ab304eb040

  • SHA1

    6d83c658fb2c854d8093015791d4d9e18ef1ae1e

  • SHA256

    7586ea2cdf5721eafdca4e8765a883973bb851a23a2026ec4c6f4e8382ed9890

  • SHA512

    3c12df45a010dfb633237e2ed85ffcfaded61e9f91779121952f68cfb98312cd755027e45224ff2c1f598240584731f10f92ca12f6615be177551355b47bf14f

  • SSDEEP

    768:QQ09dvENd7P51dQ7oh+1M12N6FpskBA2qaZG/1H5F/s/MABvKWe:QQ8ZENpIX2skBA29sCMAdKZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2