Extracted

• • Target

    8711cad07ca671eb8038aa336bbb6dfde2c701113770586b6b75e99ac4fffc02.exe

  • Size

    395KB

  • MD5

    7118de1ad6947a5c77a1d2b261c5f2b5

  • SHA1

    f899e85bcb71b5d67778f3d66c8ea5d27c227f52

  • SHA256

    8711cad07ca671eb8038aa336bbb6dfde2c701113770586b6b75e99ac4fffc02

  • SHA512

    711733a0b717447b99c466540ed8efdef867994000bb3c2256a04828d6cc6e7001066497c7ddb391bc50d5a59d3003152337821e4e27f9fcfa289464f39c0644

  • SSDEEP

    6144:P1W68Ps4y70u4HXs4yr0u490u4Ds4yvW8lM:P1W6H4O0dHc4i0d90dA4f

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2