Extracted

• • Target

    38aa0f51bbe17dfc3159b4b433cb58339158aa68c31635cb071e6544810c54d9.exe

  • Size

    368KB

  • MD5

    bb770c451725f56713b7cfd1e098d3a1

  • SHA1

    b3517eaa3b1ca9081ce446120a7fe696472d7ed6

  • SHA256

    38aa0f51bbe17dfc3159b4b433cb58339158aa68c31635cb071e6544810c54d9

  • SHA512

    d35e770f1344122ddbb4d70b02633a60548182e4ae7d47ed16bbfb7516352e33a9a99289405a34bcba604ebec8566a2a1cb52942691312396ced15ba8b44e8fb

  • SSDEEP

    6144:RnnAbHN8KQO+zrWnAdqjeOpKfduBX2QO+zrWnAdqjsqwHlGrh/tO5:abHn/+zrWAI5KFum/+zrWAIAqWia

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2