Extracted

• • Target

    351d8406ad65634e26da9a7d8dbde1541f8e27bf8b331658555eceb33790ed16.exe

  • Size

    45KB

  • MD5

    8f1e4e39ea4fbdffeb72ccd76fb1d235

  • SHA1

    272a79722be83664b06ba86b9777394a7b9d22d3

  • SHA256

    351d8406ad65634e26da9a7d8dbde1541f8e27bf8b331658555eceb33790ed16

  • SHA512

    ba64e4ae16e4a545dbee88bfd0c46a3e48742e36c3efd137a8d464e0276ebc920c2c7e9b6524241a4e87f529515e7df34764b1720758bba531e19fc5dc5ef20b

  • SSDEEP

    768:L0YDY2KY6knIwuB5LvqCrGI9+I9fN/9th+RiBessreM5o/1H59:LWEvuB5bVNkKV1gEeNiL

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2