Extracted

• • Target

    9bdb716590bf6c05b6223c9c9d1b02646eac6acd99a74b9bf9a52a3ed34ae418.exe

  • Size

    352KB

  • MD5

    c2fa40e802fb0d7a3ac017634e3abf86

  • SHA1

    8f61665680a9117f52d1f046964dfd2bac663cb8

  • SHA256

    9bdb716590bf6c05b6223c9c9d1b02646eac6acd99a74b9bf9a52a3ed34ae418

  • SHA512

    0df1f4b480cfd93a15ac67a52ce17d2aa721571e3a651d9021b2299089627354902a9e458a3c0da54f1fd8b43e9b4dbe4e1bbfafb40d256da52986e5dd50cdde

  • SSDEEP

    3072:Wv3mOqWTaMPKM1FjOJF4EISi/i4gG4nv4H3EzkGSaXiT+9S+a1+s3wNxX:YDqWTJP1Fg4yjwHL/T7GsyX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2