Extracted

• • Target

    fc0fe17273743e2d8fce82d7dfc8f632551615b34b9e24e622e6cd5272cf2956.exe

  • Size

    96KB

  • MD5

    ebb242b0a48277baed3ca8cc7fca9d17

  • SHA1

    fb6f620d445bf805419bbadf0362913c67a88503

  • SHA256

    fc0fe17273743e2d8fce82d7dfc8f632551615b34b9e24e622e6cd5272cf2956

  • SHA512

    5d8d82053cffda2a7205bfa2df69d215d9b64532fd00fe812789cb93395891e6541f45a352664fac229d40e3d373b0946103239d719bd7c40c3506e940374581

  • SSDEEP

    1536:jiZmY6Ln+7z+NstnrALbwnYYYYYYYYYYYYYYAYYYYYYZjYYYYYYx88N3x+nK4duf:jHtLn+7y8rA8+x+K4d69jc0vV

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2