Extracted

• • Target

    3f6a24ad90e1165fcaa3ce36e169e6708e3c0387a4d9060bc51ee153160a8c79.exe

  • Size

    52KB

  • MD5

    703103d97582380eca2c0a09a3709a0d

  • SHA1

    960d7fef3fa66532315c94d0e44f57fcf2914916

  • SHA256

    3f6a24ad90e1165fcaa3ce36e169e6708e3c0387a4d9060bc51ee153160a8c79

  • SHA512

    303990e6b8c0abfa48d7e38b5424d1b2431e1311d586edc229d76756f0827fa51ef76c45c17836e104bb94b1d470a7632ba9d71aaf9ef259146432d8e31758e2

  • SSDEEP

    768:K4ANltY9Vw+BGtmQIFtkghwGK6SjhFFUfx9FFdTohc/1H5F/sHPQMABvKW+:v9VwXtmVPLOGpmhrKx9HdTf5MAdKJ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2