Extracted

• • Target

    07c635bc326ffbe5a3c7e751ba7d6cd2524df754b65cdb736a5c3cead22c3e79.exe

  • Size

    465KB

  • MD5

    5a63ddff33fae5350b8448a6210154fd

  • SHA1

    3068fa52605d22572220913d62bf93692f9a8bae

  • SHA256

    07c635bc326ffbe5a3c7e751ba7d6cd2524df754b65cdb736a5c3cead22c3e79

  • SHA512

    fa0a8f81078fe57ca034c8943b7f0ac215fb9a22a0bd97fb80aa501019dbcf4c945edee67948e0beb20277f608611a6ad7fed6560ec67efe188b61addf20e647

  • SSDEEP

    6144:kkmjqOOVF5V4lKjIbvBhRJfzSf9x7N/I7b90:NO8LKlUmpRe94e

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2