Extracted

• • Target

    50541daad17a2560e9d7a6791c05a99425035a33ac9d0d54226c8a6bbc301dbbN.exe

  • Size

    335KB

  • MD5

    e88c4dedc9570c554fdac2c62b5167e0

  • SHA1

    b02229d32161795d6cc1f76ce957f799397fe57d

  • SHA256

    50541daad17a2560e9d7a6791c05a99425035a33ac9d0d54226c8a6bbc301dbb

  • SHA512

    16853734621454ff6e8ab0724a0c2d820177342a4b80d65f0259d4c23e72b5e944ec44af2995377a401792be53e52ce39306e200791b433855c39947881daa1e

  • SSDEEP

    6144:9Pv2Ag7vLvwU/4qwvwU/4qvvwevwU/4q+vwk/4q7:9A

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2