Extracted

• • Target

    9ab787cef46a7d76741844547b892ed44a8d2cb8edae7354b368e5821869c4e6.exe

  • Size

    113KB

  • MD5

    14f4cda0fedbcfaf6e7778dac9374412

  • SHA1

    bb95400bd196a3b967df23eb7ddd001144b994bf

  • SHA256

    9ab787cef46a7d76741844547b892ed44a8d2cb8edae7354b368e5821869c4e6

  • SHA512

    55a9735b3398e105686d67157b813fb19684310bff2e4e5acc2fa4670b570d6510f6f189388172d1d9077bf4e2129e3950418c59e5a80a5d3f55df54f899dd75

  • SSDEEP

    3072:Sqij0y8VIDdsu0OuGkZFfFSebHWrH8wTW0v:Sqij0PVIZsuJ7otSeWrPn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2