Extracted

• • Target

    25d10d207b813505becaad80b992e909bba88fbde127c0d2e2255ccfcd4518d7.exe

  • Size

    97KB

  • MD5

    dcad39d5c2c60532cdc54d94f50a33f1

  • SHA1

    ee0506c647b57e1af6ad9c73451a27256925c26f

  • SHA256

    25d10d207b813505becaad80b992e909bba88fbde127c0d2e2255ccfcd4518d7

  • SHA512

    e4d412c06537e1528f8dc1fe8e5d22524e54850f181c7aff3fca38f89a012085dc67ac106b559832fe460d68eab736a2868ad850dc34e6f08fd26ea1da481105

  • SSDEEP

    1536:g0yEyY64Y73nRr1ylckcXUwXfzwE57pvJXeYZE:g0ytzr11aToPzwm7pJXeKE

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2