Extracted

• • Target

    ecd467ea1ef91219064c70791387b0b136e385f62dcd6d11d3050a76a1f3778c.exe

  • Size

    344KB

  • MD5

    c53706bb075e77c5ca2400daa7f6e53b

  • SHA1

    31c7807c68cadef539286a9f5638fa07deac5e3b

  • SHA256

    ecd467ea1ef91219064c70791387b0b136e385f62dcd6d11d3050a76a1f3778c

  • SHA512

    a77360d127eda845372a80ea0fe5058ef2369ffb1ffb5887eaf5b3bd89e2b478fd7b61d83550b798d74c71f292234999f10feeb8bd96731c85f9fb92078248f4

  • SSDEEP

    6144:MFMIisZcCpX2/mnbzvdLaD6OkPgl6bmIjlQF1:9IidCpXImbzQD6OkPgl6bmIjK1

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2