Extracted

• • Target

    d4e5d3ba18a6b3a7ad49e45196186da90c3240cc8fc701965a4de2e593c06b23.exe

  • Size

    352KB

  • MD5

    59675ffaacb5069a486ffba762d5dc25

  • SHA1

    033e8fb7100d3829057acdc315eb71c84ec85f37

  • SHA256

    d4e5d3ba18a6b3a7ad49e45196186da90c3240cc8fc701965a4de2e593c06b23

  • SHA512

    78ed0f5a31ffb696b0d11fb4fd322099d0d477f631cf256fc8577d9da59142db4acd55db343b75350916d238d75ddeca7f3a31f3290dddd6c4d682b8bc3df877

  • SSDEEP

    3072:/tzcsb3RDTz93bOJF4EISi/i4gG4nv4H3EzkGSaXiT+9S+a1+s3wNxH:qWD5o4yjwHL/T7GsyH

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2