Extracted

• • Target

    b298c7fdcc4c558b9f17bbc2b14449f4efe2a9a015122353ad2b3cc751b502d8.exe

  • Size

    64KB

  • MD5

    f61e3feb0446b2c740556f8c97109007

  • SHA1

    94e3e7d1ada53686046ae9fd0d8d216cff0b97df

  • SHA256

    b298c7fdcc4c558b9f17bbc2b14449f4efe2a9a015122353ad2b3cc751b502d8

  • SHA512

    3d0176d3a22b089a62318f61cd490310985bd6aff565255c6100d48845d39f3d6d6bed16fc760ef225a4f92e585cb002f403f1fc297d69dd355ee6c835fa82c2

  • SSDEEP

    1536:dA66REhg3+IUfuVbHADnhLbwnYYYYYYYYYYYYYYAYYYYYYZjYYYYYYx88N3r:+NREfuZA7V8+r

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2