Extracted

• • Target

    f3c5f7d3247251cbe9558464b4c43c20973e1b7c25f5d206de3433c56db9f948.exe

  • Size

    64KB

  • MD5

    6bed2616f643c9509627b610ff2fd229

  • SHA1

    2a8b0d622f25bf6c726cc949d0e49215730987a5

  • SHA256

    f3c5f7d3247251cbe9558464b4c43c20973e1b7c25f5d206de3433c56db9f948

  • SHA512

    89b6a719d695beab2209fc0434d860e65a235d2d7089b638d3d823f68e4f8ee8737e2cfabfc06ec3216411070b2773469e25e715b276b66e0c80ea0f15756a70

  • SSDEEP

    1536:Qlma3jrUnjKytZv2imLlLBsLnVLdGUHyNw2:4zAjlZOimLlLBsLnVUUHyNw2

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2