Extracted

• • Target

    c1e60a28caecdb5cfe3d0ca52d7d798e63e2c88dd375d8b3bc4e75247369d263.exe

  • Size

    64KB

  • MD5

    e2e823836dcccf613e5f7f5ea5b6d127

  • SHA1

    6f9230245d7ebb0fd50b5f187e08477124390ff6

  • SHA256

    c1e60a28caecdb5cfe3d0ca52d7d798e63e2c88dd375d8b3bc4e75247369d263

  • SHA512

    e488fa5ee0b823d3fff85b5f60c77336b637800b53f0f58e977f049320c5e5cd41548174234a75193032138b75750ef0f6e7c18f4fbcfd2bd317590a2225aa77

  • SSDEEP

    1536:+HDBEgA/F05MbqqOdsEyWlLBsLnVLdGUHyNwW:+VENwjyWlLBsLnVUUHyNwW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2