Extracted

• • Target

    f5ab106100d005067022362e9d9f79b12b369d25e5453eba787d9c1401c8bed5.exe

  • Size

    90KB

  • MD5

    ae863ccdcbd4cafcaef9f39f407c04d4

  • SHA1

    6594d43e1c6a601656e27efa77718a16e3b8d1ac

  • SHA256

    f5ab106100d005067022362e9d9f79b12b369d25e5453eba787d9c1401c8bed5

  • SHA512

    8f66431cebc19685724b4aee06dc515c2b20e98fbefa9f632c1116867f00f295d3765c1560ea2a3c0cc749a5705dad75322443223e745decf9ec55829e250f7d

  • SSDEEP

    1536:Lz8UOSkOMbq59z6sWbBbxsXWGG+F6jucgI9yVnQQC4fl8k/7TZP4:LzQSkOMbds4dsf/6ucg83T498a7TZP4

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2