Extracted

• • Target

    a5d94e65631bb02d538315d424543b1f2e901d1e80d4f44e90961c885812fab0.exe

  • Size

    92KB

  • MD5

    b3954685fd0eeedc6d61a1ae6bb55bc3

  • SHA1

    c40446428489db1432c5a84973a56df3c7e89e38

  • SHA256

    a5d94e65631bb02d538315d424543b1f2e901d1e80d4f44e90961c885812fab0

  • SHA512

    96128052f98a3c0c475187504241e79918d05e48b517d8b5aa8e44c6db1d59f39cfb554acdf6f745e83f40dcc83bf17bb4e8a27c80c38eb687883e53a2c5ad76

  • SSDEEP

    1536:M5vbZhnOvIN4dGSRbV8bG5d92dG+eo1xC0GZFXUmSC2e3lK:26vk4dhxWb8924ho1mtye3lK

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2