Extracted

• • Target

    6b0411342eb8c5af3ac4969c5654d14b4e740853200882de9262ab9faeb6b8e1.exe

  • Size

    92KB

  • MD5

    ded5e50b920246c6248bb64ffeb688ce

  • SHA1

    32400630f5bac92341f104fe6ca63ed1dd96d079

  • SHA256

    6b0411342eb8c5af3ac4969c5654d14b4e740853200882de9262ab9faeb6b8e1

  • SHA512

    d77f60ed396ebafb879d1c5c76eac28b3988a4354393b839922662ba7ad4b750223349c18e741513ed8dc687306f871d6a8a5eaba33f01804c454858cc911398

  • SSDEEP

    1536:qY8d2cURP/dx8k8SgcoQrO+LjM0jlO7uXcNvvm5yw/Lb0OUrrQ35wNBUyVVW:qY8dE8SgaOdj7usluTXp6Uv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2