Extracted

• • Target

    5b2722763e0aaaf33e0b56031d071a9a59aca3716daa79adc24fe7fef8439e71N.exe

  • Size

    465KB

  • MD5

    de9b00a151f3147a3657bc8211542d30

  • SHA1

    2d551b3143952090468766fb4bd894f1c1e62fca

  • SHA256

    5b2722763e0aaaf33e0b56031d071a9a59aca3716daa79adc24fe7fef8439e71

  • SHA512

    e41a46ad9d6013fad8aa166182f09e1ddd12e00ab3ad1eb38bac48d9077825cdbbe9ab73ad4a2f5e0bf84536d645ef6216d2b5a773187e690988d2d13979efbd

  • SSDEEP

    6144:+lwLuTjIqOOVF5V4lKjIbvBhRJfzSf9x7N/I7b9M:+aLiO8LKlUmpRe94a

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2