Extracted

• • Target

    2a40361643a292993bc51f069a95c35d17282ce06b66cb72e633342f1cbe4a82.exe

  • Size

    45KB

  • MD5

    bc191bb1527acfc574065e3185c7c4b1

  • SHA1

    87a470ef3af6201cb128cf35295103320e31824a

  • SHA256

    2a40361643a292993bc51f069a95c35d17282ce06b66cb72e633342f1cbe4a82

  • SHA512

    57cb02ca4722b3058d1fcdf22a5407812ac7de35e3eb69f8b8a67dd6e9efea2043153e36f74ef41ad0adc2071778998c0083c6f1d70e26dd71d1c38f81159fa5

  • SSDEEP

    768:z/vbjLoWMKYyr4GmHMqZGbISwoYI3eqAx3emW/1H5cr:zPLqKYHsq7ShYI3eqAFem8mr

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2