Extracted

• • Target

    05d32837b99cdfd59bad0155a66adc3d1bc6307d415084d6b222c624343aeceb.exe

  • Size

    92KB

  • MD5

    33f0571f0692e3f9f825af33e7a31910

  • SHA1

    d2e735788b6e904c7f0514f3792c045b4e5c1400

  • SHA256

    05d32837b99cdfd59bad0155a66adc3d1bc6307d415084d6b222c624343aeceb

  • SHA512

    7d17ef47cd70481dfefa5d2fad670436ded744bfa5b8681c5f031d36c68e3ab8679ced298a89d2d6256c9d763a6315a4963896b8ca06151c747b9a6093d96c33

  • SSDEEP

    1536:i8K/kw6d8JM4lFplblzFw/wr2dG+eo1xC0GZFXUmSC2e3l+:i8kkXWptw/wr24ho1mtye3l+

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2