Extracted

• • Target

    eb38f3d2a50a6194e297578ecf0dc52e607983875a5339c40924d98df11c94eb.exe

  • Size

    512KB

  • MD5

    e91bcf130518f59e0249a5880dccd47a

  • SHA1

    9e9308ca595f8485ea86bfb78ec60ce229f6c7d5

  • SHA256

    eb38f3d2a50a6194e297578ecf0dc52e607983875a5339c40924d98df11c94eb

  • SHA512

    f44e522a63535f9bb67f2ec35da9e6adcaec058a5889d89c58717e5c8dd8d6b317e8a34855992ae392a71c8da01ae42b2e360332701f16b23b58e66757715ef3

  • SSDEEP

    6144:6xCyW853XBpnTfwNPbAvjDAcXxxXfY09cnEWPDZ7:iCbQBpnchWcZ7

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2