Extracted

• • Target

    2879f9f622d075cc3affec91e74bf04cf12c4f16c0864a92438a956a55db5fb1N.exe

  • Size

    90KB

  • MD5

    5f3624fd92e58337d3ba9b482ce07240

  • SHA1

    28495b9964392d3525a80fd18457aedfd9934182

  • SHA256

    2879f9f622d075cc3affec91e74bf04cf12c4f16c0864a92438a956a55db5fb1

  • SHA512

    a7bed9269b416acbecc5c8a4792ec02d3b55310549fd5bff8cf79c9394c9bca2f12ce4fc76c3f1473a8abdbad2b96a8394636b79a9c3a44f636560b3232b4e0d

  • SSDEEP

    1536:yiMaCfwif56rUheFbV3Pfar5I9yVnQQC4fl8k/7TZPN:yxsbV/S583T498a7TZPN

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2