Extracted

• • Target

    12f185c8612c9a2cbf6881a27eb7ddd54ad81dc86507cde5168f14d711566450.exe

  • Size

    97KB

  • MD5

    c1be21f315fe2e3b764beb2cff06f060

  • SHA1

    5e7cd72a66c76e3df2f0ff116f9dee0f0cdbe3f4

  • SHA256

    12f185c8612c9a2cbf6881a27eb7ddd54ad81dc86507cde5168f14d711566450

  • SHA512

    85df474acd4877bcc6845ebf8a7a22d5e9b38f779984c6e0df6ba4b3599f6709107c505011ab625cf97e9abba53536b2eeccf1bfb18a3bab804ec8a31e20c7f1

  • SSDEEP

    1536:3A7NntELvEH4d6KxXk9XUwXfzwE57pvJXeYZE:w7dtdH4EWkpPzwm7pJXeKE

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2