Extracted

• • Target

    20c642249566bc9955a9109c49355572ff5e87d86b17e49cc4027f996be82e99.exe

  • Size

    63KB

  • MD5

    2ac8f23c7ebcd242fe2fe2cc3e9c3336

  • SHA1

    527898f2c03bc1623646dc2116f71783600dd332

  • SHA256

    20c642249566bc9955a9109c49355572ff5e87d86b17e49cc4027f996be82e99

  • SHA512

    39443eb694a70e024b7fe32b5c1676ab142ccda6d685e3fc08ba92934db65f1e9d785906512105bd8135de9ff3e4614ab5f11d0fa67a9a7d0fa5900e49aef4cc

  • SSDEEP

    1536:bBFXjFpIQYe/C/XNQ7nboD+V57En9rjDHc:b7X7WC7nMDolk9DHc

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2