Extracted

• • Target

    3bf26cb3818444cb73843da7886d557a3e1dea1862898afe30683eb7815e3944.exe

  • Size

    566KB

  • MD5

    f0677627356158305ac5eee49ed59d92

  • SHA1

    bb2bfc5c794c03ebc377860eda773be75c7487fe

  • SHA256

    3bf26cb3818444cb73843da7886d557a3e1dea1862898afe30683eb7815e3944

  • SHA512

    cd36c8d74d09a20a453f727fc7cd4a6e90db76611897936d7dd64c4018b9e0386fb147daf48e4bac8c115b90bc128a966c09b62f0709bc1ef551a48feff5f350

  • SSDEEP

    12288:/R7k4tSZmtuFjAh//+zrWAIAqWim/+zrWAI5KF8OXP:/RGmtuFjAh/mvFimm09OXP

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2