Extracted

• • Target

    70cc61b13b27d056e489f47f778f361cfba14adadb6f4dcc594a6913f9868b49N.exe

  • Size

    800KB

  • MD5

    7043d78c9a08ee55ebd75b8986caef00

  • SHA1

    e05d4fd93a2bd9b921c3399ccdb59e828d502104

  • SHA256

    70cc61b13b27d056e489f47f778f361cfba14adadb6f4dcc594a6913f9868b49

  • SHA512

    00ef0260e2acdd412fdd2c1a458bc409f44a10b66ce5b2b47f10f5e2ad0f90d5ec5fd553d815075438a00c2b53d28f69376b6d4ec864b04c0ce764bdc11c4dbd

  • SSDEEP

    12288:W1oxueI/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KFHTP7rXFr/+zrWAI5KFum/+S:4m0BmmvFimm0MTP7hm0BmmvK

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2