Extracted

• • Target

    bc121efe65063c5317259369945460a543fb490a75e5786aaa857eebffea1631.exe

  • Size

    64KB

  • MD5

    911d9e4c55d806fd88255fc6d6957af1

  • SHA1

    ea96b811a67a0e223f5061d113320f5496b1ef79

  • SHA256

    bc121efe65063c5317259369945460a543fb490a75e5786aaa857eebffea1631

  • SHA512

    b0ddfa06c9c5172c820e8d0bcb8876dab0fc9f76521b62675b873eebe57886f6e022a4f0e7a1c2b4931eb8d257a576b5b67e2f8296ea86a2e9d3401b6317f2e9

  • SSDEEP

    768:5N1IIy5uktkCqaYM44dcVevu8JLUN2tj1L2Tc/1H5Ggk6XJ1IwEGp9ThfzyYsHN:PqIy8TCqRH4dwr8JL/tgeFXUwXfzwN

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2