Extracted

• • Target

    891cfe6b1441264178bb4019461ac1791a6153344f63cc8978773fdb1fc74977.exe

  • Size

    55KB

  • MD5

    663933aea1664038ce881f01c1cf2ae1

  • SHA1

    e95947c256b1ed1df5055f74e2964c19c121907f

  • SHA256

    891cfe6b1441264178bb4019461ac1791a6153344f63cc8978773fdb1fc74977

  • SHA512

    52dd3613ab0d180154ba99ae1e5fe3ad4cf6e5318993b99d278d3a5c2367348543ba2bab954a370364e148e6c73035f5cc01d79436fa45079a764816cf6b99e4

  • SSDEEP

    1536:1ZAygB7Rp2xmLQcnNqXPg6NSoNSd0A3shxD6O:1Z3gpRMYL3Nq/DNXNW0A8hhJ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2