Extracted

• • Target

    15f549f04e77fd580d0da2f36894472c1bc6b267e5d83edce9b6bcefbc5b9275.exe

  • Size

    101KB

  • MD5

    17931c5f127c8bd9aeaf174f883d10aa

  • SHA1

    1a2f40eb46dd91724fbc6cc6e4a2162abab76dda

  • SHA256

    15f549f04e77fd580d0da2f36894472c1bc6b267e5d83edce9b6bcefbc5b9275

  • SHA512

    8a480d20714d37a87256b1662d95c9a669f59132cb1454557f9cf4968e270428ee5b1cf429530a7de89649d233e2e8b1e67e803bc165a281e5a680843026e515

  • SSDEEP

    1536:zm9H0bwpkGkFJ5Fg0WzXtuXqbyNXrg0sZS7qlDABU8B9HYcJvDXR:zmQ5FgVduXqbyu0sY7q5AnrHY4vDXR

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2