Extracted

• • Target

    7f3323408ba00e47a803f95cb5cc3577632f2f7e76d75446665986950e230d52.exe

  • Size

    194KB

  • MD5

    0c3f04750d85b295a38785063bc332da

  • SHA1

    caa4864494c52fe5d28c227d6f66f69667b891e5

  • SHA256

    7f3323408ba00e47a803f95cb5cc3577632f2f7e76d75446665986950e230d52

  • SHA512

    9ea2e9db5db3f2895ddb34d4dc12c076e4eaf6ad193a7184a407a320cc9203983c61d913a59f3e7c9396918cef27376dedd72afb69bcd109c4ea5d03b454431e

  • SSDEEP

    3072:mxgTfAQBbBzL7ERNvFmMIM/kEmMIGumMIc/1GF:myfAQhGRNvF5/pbuh/UF

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2