Extracted

• • Target

    b932142a44d0a79521a6d5a971ed05c3516b280a43f279c467fadf3919aad931.exe

  • Size

    90KB

  • MD5

    f6a2a30a36b3b2b43bb185d40e4ed4a9

  • SHA1

    1bfc035435f2f9472166c91df22d202ad0828db6

  • SHA256

    b932142a44d0a79521a6d5a971ed05c3516b280a43f279c467fadf3919aad931

  • SHA512

    b053a59fecc1ce673df1556feda297a11e43bc1ca9dffc39d6fc903b3c28d4cc96789cf2d0905d5f946f248eef60b4a0e05904ee334137956abf9b63389a5df1

  • SSDEEP

    1536:Ulb6+IIYONa6FPRbBzjW/iQtOZNoI9yVnQQC4fl8k/7TZPF:UlbTNakRbBzjCt0No83T498a7TZPF

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2