Extracted

• • Target

    299d6bcdd140123f6c9c8b513312af1776c99f9c856fabc5e2feb41758570720.exe

  • Size

    45KB

  • MD5

    bdc950b351b8d4211742666ca02fa8f1

  • SHA1

    48c48ac15ac4b6f3bc75fb324587c2b55c7d3610

  • SHA256

    299d6bcdd140123f6c9c8b513312af1776c99f9c856fabc5e2feb41758570720

  • SHA512

    1c826bb9530ac50eb8cd9b01071dbb3de87e3c63900f913c268a8213cfd88895f6e8af66bed468aaeda11d6e0bf697b9aaf88032ba9548e83e310a71fb25215b

  • SSDEEP

    768:zBihtkIcYULDvxMM8QnmNqZiULHw5tEe+4C2/1H54:zBIZUnviNqZ1k5tEe+wS

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2