Extracted

• • Target

    17b3b870dbe8f3f41f08582d94b3a253c8602727742783726e27947aa317f49b.exe

  • Size

    120KB

  • MD5

    607bb3266c687c4be0ddaba283a53a6a

  • SHA1

    d22d0106b91aea7690b0fe48f8dcb26e8d917220

  • SHA256

    17b3b870dbe8f3f41f08582d94b3a253c8602727742783726e27947aa317f49b

  • SHA512

    97b23c55d724ad5cd8d5291df9363c68a0cbc3c076ab5b52756642c6af2ad39bbcd79463845a3ebab6cade063971e2efa08221d67e0759027a6363db6343602a

  • SSDEEP

    3072:5WlsRMmEbMrzCTmvBrHe3BJC1py9GZrnzPbXj/TmyOaWi+KGSYBF1i/mjRrz3m:AoMHSvBDbrnzPbXj/TmyOaWi+KGSY71Y

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2