Extracted

• • Target

    ac29d3ea7f8a930f8ad2d049f62bc607134da0a51837e2356c2a7e04dfd25ae2.exe

  • Size

    237KB

  • MD5

    bfc6ed89ac939ac6a75238ab7d54f92c

  • SHA1

    0e9cbd1d9cf81193813b4da9471698e1765bbae4

  • SHA256

    ac29d3ea7f8a930f8ad2d049f62bc607134da0a51837e2356c2a7e04dfd25ae2

  • SHA512

    da4cdaf90f716aca6251754756b57f514e75e5fbc4d85f4cece1a5b8ebc8e3c9fbc8795229be84e1e155a0dd87fca7edc202a8ea14ef4956e9d60856159b199a

  • SSDEEP

    3072:9r91Se0JDi4AUbj8Nq75Sq4iqnAUUjE02ZoL9snKKO:d91Se05i4Xj8U5ihYjEToZYk

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2