Extracted

• • Target

    f2e4b39e734a6ad9fc99c0ef810d31d85f23735c92313136dcd424a7a8c8683c.exe

  • Size

    48KB

  • MD5

    66a3adc18a027d3dd394cf99e1b1d370

  • SHA1

    579d69c0992b220175d57e56b33951315549793a

  • SHA256

    f2e4b39e734a6ad9fc99c0ef810d31d85f23735c92313136dcd424a7a8c8683c

  • SHA512

    ca4a07cc2950e28a071a2d605d29e4c13abd39325d9e6307b3f4d3ec1a66524e19163b3c69b216f0f0d5992b31280cf357c85ea6b90da9ac15b7a9ef991ef0f2

  • SSDEEP

    768:kaomWJBBGVqQukjfeaH+YctCqMZM/k48rhfm9BGHl7lk/1H5w:TomGlQuk6xYk26k48rh+9BGHl7wK

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2