Extracted

• • Target

    dcb3630e6cda2c7bf1f89408d7f507651d7ba03a7b0257297c1cfcf9a83781ae.exe

  • Size

    344KB

  • MD5

    6a51449bf434a91ca9c40c621d7199e7

  • SHA1

    dece5d4631a6ee763a58ff2f2e2eeab61efa68cf

  • SHA256

    dcb3630e6cda2c7bf1f89408d7f507651d7ba03a7b0257297c1cfcf9a83781ae

  • SHA512

    c5e6b6fa24be76d7b2ebc34b7de2603068a9774c79953c5e0d73f48446e0d136626bc2cd5fc850d00d13dbb01311c722b1792254ed5c26a6e12888dd34d2d907

  • SSDEEP

    6144:BzgyPcXCpX2/mnbzvdLaD6OkPgl6bmIjlQFn:Fgg8CpXImbzQD6OkPgl6bmIjKn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2