Extracted

• • Target

    addc143e2720566223ec31688dd77e8b88a3b24e7a7dd30b6a151d296db59ac1.exe

  • Size

    344KB

  • MD5

    d6c321a9b09bfe416f35080b960981a1

  • SHA1

    c0ad1254ed0f1324b7a91093cb22ae56435d8d8a

  • SHA256

    addc143e2720566223ec31688dd77e8b88a3b24e7a7dd30b6a151d296db59ac1

  • SHA512

    978e8217218b5df9cb4365a1b10af3073a6b864788598aa18b5a9bf7165b6fb14da8204aa938e73995a2179786691a33e57c8bee9576d6af9fb4f02c5e22d817

  • SSDEEP

    6144:SaboWX+CpX2/mnbzvdLaD6OkPgl6bmIjlQFv:3bo/CpXImbzQD6OkPgl6bmIjKv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2