Extracted

• • Target

    69540f6d886e735dffbf1801abd867bbd08008e893444f98100b207bc7aa0796.exe

  • Size

    250KB

  • MD5

    9325d741981fe648e9b15d03c33cdb0c

  • SHA1

    a9a761804e1dc9728d1724fa5b370001dfbf658b

  • SHA256

    69540f6d886e735dffbf1801abd867bbd08008e893444f98100b207bc7aa0796

  • SHA512

    cca1704b55550dff6d6c945b6c5d4a41b44eb75844fa4f0d0a95980fb0ae38ea64e1e55779f3d3609b6828938f81587a8427770658b887e266da10ef013e9eb8

  • SSDEEP

    6144:l5VwAyqlvCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ73:lEAyv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2