Extracted

• • Target

    225a04300d1b6483db352d518ff9b21f716b09852367743088eaeb8e681205c4.exe

  • Size

    400KB

  • MD5

    ec44f8ec596932d9f4ad2763bd176d4d

  • SHA1

    3028dfc84c249171384434d207a69d9fd08c9653

  • SHA256

    225a04300d1b6483db352d518ff9b21f716b09852367743088eaeb8e681205c4

  • SHA512

    a0d67d69c0e7e0fd50d475464947e47979bd24a0dd2b3a8db667ef411f93cf4057e3f4688245eddd8d94ee3c2daf8eb1fd0dcd3444023790cf32b0c5413c44c8

  • SSDEEP

    6144:S/TgHZxA6rQO+zrWnAdqjeOpKfduBX2QO+zrWnAdqjsqwHlGrh/tObQO8:ygw+/+zrWAI5KFum/+zrWAIAqWim/8

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2