Extracted

• • Target

    a68ac874004906449d1899517443b404f73c57ecbaa6bb815e60523719d256f6.exe

  • Size

    256KB

  • MD5

    48a9ed900c02a7cb0494b9af3d1c312f

  • SHA1

    4c9ac82aadc43e7571231332f057b58c6a79c828

  • SHA256

    a68ac874004906449d1899517443b404f73c57ecbaa6bb815e60523719d256f6

  • SHA512

    3176b36d41807791f8e009f0ba7289d8693c1f1c2a385d477e7c4f22d36e06bcf3d8c25299dfc6d72944238de4a20c712be7dd9546b79592f7e6326fbeb22704

  • SSDEEP

    6144:RfTmib853XBpnTfwNPbAvjDAcXxxXfY09cnEWPDZ7:RlQBpnchWcZ7

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2