Extracted

• • Target

    991a331e194fa98bc0f727eb0e73e21c599377ee17c7be2cfcb61eb969677136N.exe

  • Size

    232KB

  • MD5

    d24a77be3ef93f7c6ab2367556b27ee0

  • SHA1

    2eac2243a57d937759ecabd98ccad55cd0933dff

  • SHA256

    991a331e194fa98bc0f727eb0e73e21c599377ee17c7be2cfcb61eb969677136

  • SHA512

    88aed9a56342c06afe662e42a4d1be8967591961acc31159a2bb12bd53e77ae503919485755bce0f15464782c23ca4e2c702cde047ff2993a257aeb91c17f945

  • SSDEEP

    3072:XA9QSSkshqt17usluTXp6UF5wzec+tZOnU1/s5HH0AU/yRvS3u121TzlbNRfzPa+:X/hFG16s21L7/s50z/Wa3/PNlPX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2