Extracted

• • Target

    9eab482419f29b8c24841e46c9c48ee4a01b4bf271790c9aa4b255cf6c4e6a79.exe

  • Size

    428KB

  • MD5

    1ba9331da709f5ef2f16248674688b27

  • SHA1

    f429eeff53477f2e0b6a228790098ee078264312

  • SHA256

    9eab482419f29b8c24841e46c9c48ee4a01b4bf271790c9aa4b255cf6c4e6a79

  • SHA512

    4fd7f64fbc49d24c38615500919486ca7c88f2ab54e2106bf7424d2d028e265dfe2215051ac0dac1db9b75c4a5302e2857ac70ca5c7251eae0ce9837eba5ad4d

  • SSDEEP

    3072:j8dOsh1SZ8mnaoPav8Wz24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho19:aOsh85ba4sFj5tPNki9HZd1sFj5tw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2