Extracted

• • Target

    89cae72839a21fbd8a660b553e482f5e9851d7f037c8e78452c059e1ac9be44a.exe

  • Size

    448KB

  • MD5

    fb80375930371b5df4e6a403a0e6f14e

  • SHA1

    233d12c58b4b1e30159955201da512108250f7af

  • SHA256

    89cae72839a21fbd8a660b553e482f5e9851d7f037c8e78452c059e1ac9be44a

  • SHA512

    94629ef4724688ffbb6ea2c85c7e1e01dc456ed2f02e99481d6b8ecca1c8c1afbf26414e056ceccd9e1d43eb4b1963a2a40da231b6237946745db37984219740

  • SSDEEP

    6144:t78I6s21L7/s50z/Wa3/PNlP59ENQdgrb8X6SJqGaPonZh/nr0xuIKjyAH9SKzu5:tI705kWM/9J6gqGBf/sAHZHbgdhgi

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2