Extracted

• • Target

    d388004432caa36751f5da789cf081e4d5a0a968bdc3eb2c011b4740a99ee9b4.exe

  • Size

    45KB

  • MD5

    c89b4b37c442d8b5fd77790ab08894ff

  • SHA1

    83b084bf5e5d4c3280db9fde5e4d7ec18f3ad530

  • SHA256

    d388004432caa36751f5da789cf081e4d5a0a968bdc3eb2c011b4740a99ee9b4

  • SHA512

    51de69bad8dca6c5e95a01e0409e2d943926457d9d90f074240cf2bd58a898c4865bf077bd3b61ec02f5e99f9125117c9a44ea5921071e28dbdfc5da9204a945

  • SSDEEP

    768:sX+OK36n0exVolWd2XNZxslGJr+BYa/PWmne88yLEhK/1H5Sm:sX+LQ0extANQlUr2XWmneFGEaJ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2