Extracted

• • Target

    c16c080893c0f61477cdce4f97b3be722f10d880dcbe09c54b27fb427a111a76.exe

  • Size

    395KB

  • MD5

    6c9310b390a9809da0b181ddfbec7aac

  • SHA1

    770a2d87fbb2fb9fab8118c8cf2e9906fce90a21

  • SHA256

    c16c080893c0f61477cdce4f97b3be722f10d880dcbe09c54b27fb427a111a76

  • SHA512

    933c996664ef34177d850a437905a87000ef2b72ed91cad45a10e2e0f1b2abcca797cde78428a3021eb4ff3d3db87138f5b1f8fe8657d72014242f6cfdc5bde6

  • SSDEEP

    6144:EGzBLruyNCs4y70u4HXs4yr0u490u4Ds4yvW8l0:7z1ruyL4O0dHc4i0d90dA4V

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2