Extracted

• • Target

    c34378bfc3fa685a79d319d35cf7fe82e49614024d258a8c853b24dd169be91c.exe

  • Size

    88KB

  • MD5

    f2bf9e113ee58f678ba39d97042ff39f

  • SHA1

    21862ff5e644e8a6fee74d24632560ade0fd5eb2

  • SHA256

    c34378bfc3fa685a79d319d35cf7fe82e49614024d258a8c853b24dd169be91c

  • SHA512

    7325ef7f5a806ba8f1da975f982a959f7a5fb5e1e10300cb1d313bc8cd118980b9bce2445e20f5201899bce25496129d55f6f3ff7ccfc1888d35d7036301d978

  • SSDEEP

    1536:yvqhtOde3eZSlOC1zF4b3M6tp7zcTZrxwFL8QOVXtE1ukVd71rFZO7+90vS:DhsdNSOC1R4o6tMZKLi9EIIJ15ZO7Vq

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2