Extracted

• • Target

    d658fc976a5b277e57f77f0dddc69a5f4def4de7d9d7b20b3c52919082590af2.exe

  • Size

    320KB

  • MD5

    0ad85a6ae25620e25db7e7a2039c21d5

  • SHA1

    338088df08773a76727eae82b52a84d286fda9d2

  • SHA256

    d658fc976a5b277e57f77f0dddc69a5f4def4de7d9d7b20b3c52919082590af2

  • SHA512

    4cd79d05e9bcb15f1ca033369b4a10ba8667a7a7304e231f1e0cee1388fc033dade8c49954b529b002c6fed834c7f1b5374878ad8422ac7913cddb65985fde00

  • SSDEEP

    6144:f1H+knzH6s21L7/s50z/Wa3/PNlP59ENQdgrb8X6SJqGaPonZh/nB:NHg705kWM/9J6gqGBf/B

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2