Extracted

• • Target

    46000b021a94b473bf66ef35351141664e9e8671785ae7aa1854ea48a54a0bc8.exe

  • Size

    64KB

  • MD5

    1260ea39db0fe06af0a9ec6361da793a

  • SHA1

    744ae976dd99bd0dca9074c2337a3962f175b182

  • SHA256

    46000b021a94b473bf66ef35351141664e9e8671785ae7aa1854ea48a54a0bc8

  • SHA512

    3d162bcada121c64bc9e8c9e2681dd2f5a3fdf204721f47b984df3d852795b467b2493c1c8676864b40c9031827c049cb6f9600593c1bcf04a7940c9fd3e635a

  • SSDEEP

    1536:KxoFHfjy9SJV0FlL4wJ9eEW2alLBsLnVLdGUHyNwW:wEe9S8NqEalLBsLnVUUHyNwW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2