Extracted

• • Target

    9190a31d3ae12013e87909e776c820cd4f5c98689d6a0a08982434f9a2e8d4d1.exe

  • Size

    64KB

  • MD5

    4f1ac8f12355422c558e8fe3b6a23001

  • SHA1

    b4f599906eabd83ce552fa8223b914ac2380bba7

  • SHA256

    9190a31d3ae12013e87909e776c820cd4f5c98689d6a0a08982434f9a2e8d4d1

  • SHA512

    d202d99013698ede298b7456a0d88a6dcac98d79fecb140e34b33c5b1f10b01c3c88676aa3abad3bdfb5a0980eca32358c7ff0bf3ee036ad3bdd2ca1bd4957f7

  • SSDEEP

    1536:HbB/6f06Uuo6HM3hZCLRM4iOBLEPXUwXfzws:Hgf3U+khk9diOSLPzws

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2