Extracted

• • Target

    12d536867c2fa86add950a60a447527b3f84b1b11208c17bb855c3402826cbbc.exe

  • Size

    232KB

  • MD5

    ff724eebbb6fa744e77868c53c1068ed

  • SHA1

    66cef63e1ee2190740ab8a58b88de28919149c86

  • SHA256

    12d536867c2fa86add950a60a447527b3f84b1b11208c17bb855c3402826cbbc

  • SHA512

    c4fb04129ba95d8b0b8608b06223570326cfda470ab91be6472f7bc8b3ea1101a1c5d937c7a84135f98e53d7962cd604e9ec197bdce81cc8c384e99fcc39dec8

  • SSDEEP

    6144:uC8J5t5JWB77YX6y6s21L7/s50z/Wa3/PNlPf:5C5t5JWBvYXA705kWMJ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2