Extracted

• • Target

    b9c4cf043ce88ef8b0558bfb63379865319eaada4a8f76ec17868afb445fac86.exe

  • Size

    55KB

  • MD5

    fa07a8a81c0f0718f68df1a99845f715

  • SHA1

    5e7fa4f08eb3f22c2a5437ba2be3256b6bedd172

  • SHA256

    b9c4cf043ce88ef8b0558bfb63379865319eaada4a8f76ec17868afb445fac86

  • SHA512

    1f82bea847bca294a8eac5c8bb09cb60aebd9f27c3bf2d5dcb308d41403e1d18c0551774fdd26eaa6715cf5cb09c9fbe0d243e6c96007f2531cbf6ee38dbf776

  • SSDEEP

    768:0BizUc/idIEihQht6952crxwHRK9OGXXRQB8sBDX/1H5nfmNSoNSd0A3shxDfC6:0BC6A35Gbtp4NSoNSd0A3shxD66

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2