Extracted

• • Target

    c56a0f14dcafe2b1ad5a2ce1e53118ecf32d5b600629c1623165faeda831a6d4.exe

  • Size

    136KB

  • MD5

    ef213f67362ea098022e375b558ffb3f

  • SHA1

    1c988e3cd0b3a60f6aa3e95487a49d7fa5ccd316

  • SHA256

    c56a0f14dcafe2b1ad5a2ce1e53118ecf32d5b600629c1623165faeda831a6d4

  • SHA512

    8a5640063f7cb93d9cf0cf5cc7e98b0019c7010a52d697d14d995c5f56dcba21f650a179a0bc3915233e2a49c0bc54f3db04bb0c41a8df2cf3e9fc43a3f88ba2

  • SSDEEP

    1536:okCB9kd8AjA2M3SDcGWjIHcCZc5mz8+QquozVV/ljz0cZ44mjD9r823FQ75/DtXB:oFBj8xtDcGWucwNAIzVt6i/mjRrz3Oz

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2