Extracted

• • Target

    78fcf0e4bb3021714ab20aad4fb4b93ee6894ddbeee115fc721425ef10f3c9ba.exe

  • Size

    64KB

  • MD5

    510db380d787236b627501f7fbcd7884

  • SHA1

    a9e9a2540a420fd0283371d476465ec76fbe11d7

  • SHA256

    78fcf0e4bb3021714ab20aad4fb4b93ee6894ddbeee115fc721425ef10f3c9ba

  • SHA512

    1b2df182b69d8739e52ea8b6f9583fe90eaf1c664b18fb5d0e23678e1232203c7c0da9b92651e9c5560d57abfcb992143d472cea2a26a4112c57d1a50bd89a0f

  • SSDEEP

    768:vhqLTCrsy1qY8YfvQm3Qze/7BPB4ecZjREaPEr6lbu6akVKLAwN/1H5v6XJ1IwEW:vhqLCRX1FMe1PB4eJWs8KYXUwXfzwW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2