Extracted

• • Target

    076db8e6cab0609fb9fa64c472a50884a14b6f7fa6e62b44de2741938879314f.exe

  • Size

    91KB

  • MD5

    80bb3c2f1aedac532606b52a1de2ec5b

  • SHA1

    60bbd5ecc61c092af6e849b91399c6e5c474340c

  • SHA256

    076db8e6cab0609fb9fa64c472a50884a14b6f7fa6e62b44de2741938879314f

  • SHA512

    f9bb8d22d2ec2a0ebef078400d305298f0a944e7198dac0888fee2f06af6ed3199ff320c4b055e1c546172ff5b17f308892f654e1ab515b83025933bd7745325

  • SSDEEP

    1536:eAnxNgOR9fs56AD68lujfxNEDUfsENriC3FSr7TiwkU6joqqIVLgO:dNgOR9fsHD4JJfBhvFSr7TSUurUO

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2