Extracted

• • Target

    ed3f1c85dffd013b4c871a4fe00c03b67a67963c56586fed4578721a4cfe2afa.exe

  • Size

    194KB

  • MD5

    8243a4fb1ff00354d3cb8d7835454215

  • SHA1

    7fd540993b9c08e118cf3d59ad93abb63fe711b9

  • SHA256

    ed3f1c85dffd013b4c871a4fe00c03b67a67963c56586fed4578721a4cfe2afa

  • SHA512

    1d8a612d4e000e5ab96ff415d49cf82edd4275601d8f75552ac502670220d3c030f5c167ee5e5de137440aad7076309af97dae4666249d9733a4bc00f8f6469b

  • SSDEEP

    1536:21NR1MbusUdeW07wVos7OkXxZOZatMIM/5/KEatMIGuatMIc/zT4a5GV:2L1IkOk7imMIM/kEmMIGumMIc/1GV

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2