Extracted

• • Target

    9b64eb5f0eb3fb6b2212f03bcc9c685f96ce7867fa7e7a672e2e78b2b3dbb3da.exe

  • Size

    45KB

  • MD5

    bc137788a8fb1075b80b5b79b075d5d3

  • SHA1

    690a16e5a46f1380668f8d273a039e45c8841774

  • SHA256

    9b64eb5f0eb3fb6b2212f03bcc9c685f96ce7867fa7e7a672e2e78b2b3dbb3da

  • SHA512

    00e68f8e9252b18b07e462385371b0912619b2719ea70e4b9b865615441cc4bed543f07e1ab21f5c85f51eeea80b979fc1b0ccf78fd2ecccd8a4cf9281c5ae7f

  • SSDEEP

    768:SpIJv1qPPVBlLJkO6QarB/iVAE3H2MeFT8DRVYanY8Tc3Fgcuyt/1H52:SWR1qdtkHviVAqnVfY8qlNns

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2