Extracted

• • Target

    2a342f91ee71c9fd806cd169659b38886feb841e0534bb876a8ca6b44a684422.exe

  • Size

    318KB

  • MD5

    358d6b8c3b8d3794b0fcaf459e324ee5

  • SHA1

    d57cf984688bd00c4fc552f2257ca1352557d801

  • SHA256

    2a342f91ee71c9fd806cd169659b38886feb841e0534bb876a8ca6b44a684422

  • SHA512

    3ef0b7bab485c7cded53854e6cb3f15f731d4100e940511f4a2dfa9cb2568fef573b1e1f9fa896dce574daa8b5032b90502e721920b1bc0232f28fc3426b8f25

  • SSDEEP

    6144:Ye2RVEQHdMcm4FmowdHoS7c5cm4FmowdHoSrNF9xRVEQHd4:YbO4wFHoS04wFHoSrZx8

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2