Extracted

• • Target

    1f33110c24c2f75a50820694a83c1347e42c4c8f35d02fdf8e4b7b986b84ab74.exe

  • Size

    67KB

  • MD5

    50b13aa7c89eafb7ff5ce5c43fbf742a

  • SHA1

    3648d3c1c47eaaa9c9aabb9ac492fef5e20d32b3

  • SHA256

    1f33110c24c2f75a50820694a83c1347e42c4c8f35d02fdf8e4b7b986b84ab74

  • SHA512

    c50378a9284175940483b49d227a8435c42a12a1ece890a2934142544809b0f1e27c147db9810dd141df49e16e6623b2a41d0ddbe7af67b918cc7fab5d1cfa8f

  • SSDEEP

    1536:M68rwMs/vpyPRqmQQbwv7OesJifTduD4oTxwh:M68EMs/v3nQcv7OesJibdMTxwh

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2