Extracted

• • Target

    f415dc4491882f9b488bd3cd2cdbb24dba6cb4f699318849f9c10045b5142aa4.exe

  • Size

    45KB

  • MD5

    b6efd275344b1be99f8facca2f307f2c

  • SHA1

    56914cef9ab11bdbc68493cc5fa57a8b7bafcdad

  • SHA256

    f415dc4491882f9b488bd3cd2cdbb24dba6cb4f699318849f9c10045b5142aa4

  • SHA512

    480101b1527ac5403cab9f75ac33652a6508b5ba082a84b233c35f9eacd5d57d6c6396cd3a445dc8ae6847930cf46c7a92ee6c134fd908f4636a6d205fcef69a

  • SSDEEP

    768:djFveijGFGZBNZXueWZZf4nC7csAavRKRRROLV/GfGw49/1H5xt:dRvhiGRBubZqnbpaERRRBfGXp

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2