Extracted

• • Target

    54d309c50cc69aa7ac97fd4d3b20b8f640e70f39b48b57a3218e2dfc38bf6365.exe

  • Size

    64KB

  • MD5

    b5bc5c96c9e62f5d600ef0b70a0fa942

  • SHA1

    0741ef2684ffdea38702b450be3c99916cd91a0a

  • SHA256

    54d309c50cc69aa7ac97fd4d3b20b8f640e70f39b48b57a3218e2dfc38bf6365

  • SHA512

    c020fd7f6f8ca6ff61abc7ce67cb4d13acbfeb46b6cc04e34849867e32bddf1f58bbd91079e9291f957c33af8a1169f75237437dcefcd7c0079428c86e056bd0

  • SSDEEP

    1536:ot0jwkO2MtiiRhTSEXOOKvlLBsLnVLdGUHyNwi:q08kOmOKvlLBsLnVUUHyNwi

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2