Extracted

• • Target

    555b818a61cbb7d8858c898dd08986375e8fdd7efc326d7eae6ae17d48b43e42.exe

  • Size

    361KB

  • MD5

    da7d97ea35f91bb5457ac6f3c3cb2b8d

  • SHA1

    854ceb0e6c50f5fc2792801cb8d2deac7ff58318

  • SHA256

    555b818a61cbb7d8858c898dd08986375e8fdd7efc326d7eae6ae17d48b43e42

  • SHA512

    3856ad56c8886dcf56758f00724f26214507f62b7677c9825ca8f191dfe74ea72be5717abb6a8a0961f6ad72ebdd114abc031614882d7547fe956439ec3eed3c

  • SSDEEP

    6144:b1c9SCpX2/mnbzvdLaD6OkPgl6bmIjlQFxUP:RcgCpXImbzQD6OkPgl6bmIjKxUP

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2