Extracted

• • Target

    940eef0d1acc33aa6de25412fed03b4d4eb6a09e6010656eef906dc306559a4d.exe

  • Size

    93KB

  • MD5

    b03a952f83c2e2caedc76e884fedd775

  • SHA1

    a8dca0e22060109a6cc4ceb0db8ddae7d5b483e1

  • SHA256

    940eef0d1acc33aa6de25412fed03b4d4eb6a09e6010656eef906dc306559a4d

  • SHA512

    ea26980b7a1b351bb456b6db937d05713e49517f5df84ddc2aa789e70e905968a641545242b2c2f13ef6f1b31aa1e03cf47753ce31cfacb868a0034d41061164

  • SSDEEP

    1536:CqFpU/2Xw/mR/a21i6AYVepJJZIcqID59KOJk24VEI4Lar/ju7JCs:De/2A/mZaci6Ne/nIcqIOOJF4EISi/i5

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2