Extracted

• • Target

    5579da545180e6cb4cd83f13f862ba2cc497b136841fcfed129b6df2475700cd.exe

  • Size

    55KB

  • MD5

    abb8143c08d1b620a36460e61c9118cb

  • SHA1

    703dd9a8c94259ac996f7f5a03003b9431c267e5

  • SHA256

    5579da545180e6cb4cd83f13f862ba2cc497b136841fcfed129b6df2475700cd

  • SHA512

    7cd63323c3ecfaeade4ba983f8ca5e02a8b2dceea23005ff9e7e17a42cdb203e768fae81fbdbd376df7231e68f582266f929ee74c4f03161cf1f2257ca356e97

  • SSDEEP

    1536:4G+fceYsI2xs8MIWMIr/aUsGt446xNSoNSd0A3shxD67:4G+kuI2iJFr/aUsGt4pxNXNW0A8hho

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2