Extracted

• • Target

    98ee8fe6414a01beefb8c69d282771d51dae32e4cd2e7fb5ed9b8a999bdd9ae2.exe

  • Size

    45KB

  • MD5

    c95c951d8fe1db57f5d0e80cae41a92d

  • SHA1

    a92ed248bc21227c61025717f699e26cc74df27e

  • SHA256

    98ee8fe6414a01beefb8c69d282771d51dae32e4cd2e7fb5ed9b8a999bdd9ae2

  • SHA512

    4cfbb10d442332bbc06b82403e3a33f8dfe3bb55adae78fc0eae202ce790d5e0874b653c40e9c66f915c6e59b1dabea29e090768441ebc41a636fbd829a9d632

  • SSDEEP

    768:blod6YG8Lv7/WQEjGkiYGUks7Mk4qGD20t/80zH5DUk1tntJTQ/1H5wC:blo28Lv7/WQOiYGUks7l432Q/8D+tW9

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2