Extracted

• • Target

    83a2de7973f4e60e4f32d01cf552badc280cc608cf7b80f5c89c09c37fd6e530.exe

  • Size

    97KB

  • MD5

    4137a523463bbf5cd0e04e47813c8762

  • SHA1

    27b4e26ad129ff478b527f0a8bf325273b367af3

  • SHA256

    83a2de7973f4e60e4f32d01cf552badc280cc608cf7b80f5c89c09c37fd6e530

  • SHA512

    82693c7f4333921201e24f528113a24d0c185382a117aa73d7a741af14b0d233ae2d58f07580132d91ad13fa027eeb93038f66961d1b18b1ccc0fb63fbd5842b

  • SSDEEP

    1536:ye5g6EIo70cA3mbnaUqNXUwXfzwE57pvJXeYZQ:ySP7o7jcZPzwm7pJXeKQ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2