Extracted

• • Target

    90378c64076269b7997469c5d54c9e401328b340164763d9dc536dd2bb68f4a7.exe

  • Size

    72KB

  • MD5

    32d900432871992b2abb0ce47fa1cdc2

  • SHA1

    994e6f05912c5efdce3190a8fa7a8392d9bbcf7c

  • SHA256

    90378c64076269b7997469c5d54c9e401328b340164763d9dc536dd2bb68f4a7

  • SHA512

    79e1e4d781f1ba75419562edabfa6999325aa1e1988d28cd78360d80bf5b477ed722f6a9e61fc1bf77b76dda8aa3a899c9d2fc7cf90bb3d4e5d149f7dd5cb2a8

  • SSDEEP

    1536:Ua7UjPWSu94fS7Cq1UnV6000000000000009u4NPgUN3QivEtQ:WPWFhWA00000000000000NNPgU5QJQ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2