Extracted

• • Target

    669f81759ab0e4d0e3e4965728c3bfcf9dbb7311d29a6b46a7295a1b68d1af98.exe

  • Size

    64KB

  • MD5

    6a58b49c07ed025cbd9ddfa88a156d79

  • SHA1

    31ef6f05801f5f485132844e6762c299bc495f95

  • SHA256

    669f81759ab0e4d0e3e4965728c3bfcf9dbb7311d29a6b46a7295a1b68d1af98

  • SHA512

    a2c64b174b1b7214b25cdb8d5d5c53d8ce6d9aa10b0c53d155edaac42d6cd755ba90d7fa1c95dc10b65444c3b6a6d81d0af41c8e8dd46fc18b035ebdc283400f

  • SSDEEP

    1536:nUenGhHMN3oiJo+YLWvAWyHrPFW2iwTbWf:nU0GhsNYi0PXjFW2VTbWf

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2