Extracted

• • Target

    c88c01689dca5cb8c8e0b5e2142733f0a7addeeaf725be44a33c3feb687e3339.exe

  • Size

    91KB

  • MD5

    027804d6459231bf7741fce86ce51fca

  • SHA1

    67153396fd2bbab384b558073dd04f3a35d8aa4f

  • SHA256

    c88c01689dca5cb8c8e0b5e2142733f0a7addeeaf725be44a33c3feb687e3339

  • SHA512

    573051354da1f863d87d2550d20773ff3dac718fd3bdd8c8ae3ce88a067e0f90ad86b1bf2339cc01336727b0a82d72d0bb1425d94362f92e1bc4d28a8bfdfc4a

  • SSDEEP

    1536:9n1lAyDyJeg0qufEMGMxfnAtlLBsLnVLdGUHyNwtN4/nLLVaBlEaaaaaadhXd45s:91GyOJLHuf9fatlLBsLnVUUHyNwtN4/l

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2