Extracted

• • Target

    e0d913d8456ceda088c57164aa2343fc2fa29a811e14606ba55a33f114ab872b.exe

  • Size

    64KB

  • MD5

    9c300157373eaecfce81a5d209ac4a1d

  • SHA1

    b1acc9ba7c39e65957ed535ebdcb91995f04d873

  • SHA256

    e0d913d8456ceda088c57164aa2343fc2fa29a811e14606ba55a33f114ab872b

  • SHA512

    30171027aead0207724d6211fbce6d74e8f543b22cddd894c3003315954289ad15654e4fb9c8f2933958de1b1c4d2c1d1921ea46831cd8b1f4cb05f0d05bc031

  • SSDEEP

    1536:U3SUEN1VRSiIHyySUbzYh8hJ5XXUwXfzwd:sSUEnSiIH/5hJtPzwd

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2