Extracted

• • Target

    b32883de9563d0e41569f9f175fcf18ed77d3be071b5d628088bec89eacccd7b.exe

  • Size

    192KB

  • MD5

    4098d005b1f711e6eab197d727362dc5

  • SHA1

    fc8c3960f29639022795a6e90d24e1920c1fe753

  • SHA256

    b32883de9563d0e41569f9f175fcf18ed77d3be071b5d628088bec89eacccd7b

  • SHA512

    ce63f23df1464fa3875e3a5a8f279641ec241bdd417e8ebbcf9be31a2c14b37e81e733706a9d9509c3e8919b28dfc14224138c1d85ad165695b4781fa5d84ee9

  • SSDEEP

    3072:5cNfLE24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424hoc:5OLpsFj5tPNki9HZdc

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2