Extracted

• • Target

    5176d970544dda26dabceb610d067fff65d80282d299b57d10e173c4788c9e51.exe

  • Size

    465KB

  • MD5

    92a9dcb71b9f980994d2d2b121a8e939

  • SHA1

    e19a23a0919315dfb76eda1a23d544e96d7ac29c

  • SHA256

    5176d970544dda26dabceb610d067fff65d80282d299b57d10e173c4788c9e51

  • SHA512

    9ef13711158a6910bc255b4869bd69567ab7faeda33e0c1a8da79e6e5fdc1063c1481b070d6194cc1112dda26defaf64e22d1a38aa6c88603d1f52b073d5d826

  • SSDEEP

    6144:PxiM5AEhwqOOVF5V4lKjIbvBhRJfzSf9x7N/I7b9M:PMM5AErO8LKlUmpRe94a

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2