Extracted

• • Target

    57b2f522428707ac5af7de3d61daa8ccb9463f77a395cf9253458a720931e5bc.exe

  • Size

    194KB

  • MD5

    fca121eff3972073773fe8d4e8864f81

  • SHA1

    13b7a5b75d38aa00fbd000d4ea19abb7d8c5eda0

  • SHA256

    57b2f522428707ac5af7de3d61daa8ccb9463f77a395cf9253458a720931e5bc

  • SHA512

    efa44d65005fe249a43a9d2b35a2f90e5b8f8dd377e06595148ca279e7a04eb2fb7fc2b533a01b01f422fb46de27b29abefa417acd470aaf297d7e107e813edb

  • SSDEEP

    3072:ChE6QrvFxhg6M5X6kmMIM/kEmMIGumMIc/1GX:IQrvJk5/pbuh/UX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2