Extracted

• • Target

    aa772fb3482438991f741853da94a5223040b5e3df90dbecf3f226de3741cd6bN.exe

  • Size

    96KB

  • MD5

    d8709d889e496a09622d4d1ceb4bce40

  • SHA1

    74211e219b0fd7eadccf8b9a1b3e249d24c272a4

  • SHA256

    aa772fb3482438991f741853da94a5223040b5e3df90dbecf3f226de3741cd6b

  • SHA512

    efa9ba5a32beb2c442910f8f6920a58aae1ff3ad3f03496e99e4b1a5abc8afdde8d439f5eb9b6d266219509792bac2a66fc7011c608d839a7c6c11ca420c5bc7

  • SSDEEP

    1536:FTw9kRDhyYlajSZ8KQLbwnYYYYYYYYYYYYYYAYYYYYYZjYYYYYYx88N3x+nK4duB:FT0g1yYASWKw8+x+K4d69jc0v

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2