Extracted

• • Target

    de33de104e63dc1a5d657a0c510dd3ace822e6c48488353cddbc70f50ce49239.exe

  • Size

    465KB

  • MD5

    a11fbcc3e3aeb70f8b77e26b7f8e1060

  • SHA1

    b113c8f6383562706f4277a0d465f0373d31c3b0

  • SHA256

    de33de104e63dc1a5d657a0c510dd3ace822e6c48488353cddbc70f50ce49239

  • SHA512

    390d65d3bb4ba9c2d7b8c0749d12a8139eea2717d7043e14c30370abaedc7f26c74e939b82733d64466920987e8cc36e5d6fc99c24a7b569972f248f28550fa9

  • SSDEEP

    12288:oT4wqx3FwnVAVjw7O8S/WNLKlUmpRe94u:oT4wqx3FwnVAVjLh/KKlUmpReeu

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2