Extracted

• • Target

    783c7e3fbda4118a252244026877e89a8864a3e025c7b7ad780e95093f95160e.exe

  • Size

    92KB

  • MD5

    00b86ce49f52bb2b1a8da4bdbc1dda45

  • SHA1

    89c4700115a520825d474702653aca864d6e6855

  • SHA256

    783c7e3fbda4118a252244026877e89a8864a3e025c7b7ad780e95093f95160e

  • SHA512

    2c08d8d182be2ef5e70f314d238c8b4fb419d732aa3798824c1dfc0d9c088625de61f50191ec1a3f47ef905c308b1d2ebf89a3a958493a990dde14eb56f09b9b

  • SSDEEP

    1536:2ZM5MKPLL0a38UUzh9yvMylO7uXcNvvm5yw/Lb0OUrrQ35wNBUyVVG:2m/vx38U+ova7usluTXp6UX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2