Extracted

• • Target

    f1357ebcbb5b2a70b61a640df8cddbec51c55a7111508349985cfee9e9a44bdc.exe

  • Size

    90KB

  • MD5

    0d8e069c0e7c64c5fb83c9e4d369114b

  • SHA1

    5d95e921fa4ce0c5d07a60ec800f95f0fccb57aa

  • SHA256

    f1357ebcbb5b2a70b61a640df8cddbec51c55a7111508349985cfee9e9a44bdc

  • SHA512

    0e53aa79110afdba593352ffcc3f031c0667acd1a93b6ad6b3b44a4fe761323ad5e9bbdd20bd4ae45efdec743053638b4cb74878e69fe9152287d0c74c877f98

  • SSDEEP

    1536:EV81kDFMJlCTkX8gI9yVnQQC4fl8k/7TZPN:EV81kDFolv8g83T498a7TZPN

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2