Extracted

• • Target

    4d0e232e9a364f65ac26fe649a950ea3eb07f059a451a94f10811c405a4d4dba.exe

  • Size

    92KB

  • MD5

    d662cd3dc86f0213129a240e99d4bfc6

  • SHA1

    0bda9434e546931022be27e3367e2db5bf8e447c

  • SHA256

    4d0e232e9a364f65ac26fe649a950ea3eb07f059a451a94f10811c405a4d4dba

  • SHA512

    83e2c8f7e90220e9cc5681e4fa456c0f92254bb0a4972568900a9d7734ea7968342c926abb03de7292ea9ce961cc105217f05ccdb7e6486211a1a580912e8a4b

  • SSDEEP

    1536:oLjqhWKkHzp9YPsD1KfySJkQB/2dG+eo1xC0GZFXUmSC2e3lO:UqYlHl9Ym1KQQB/24ho1mtye3lO

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2