Extracted

• • Target

    57ee90c92f64cae2ee9b0ce6a4891037941794085c9c9911149ae560e7954a94.exe

  • Size

    250KB

  • MD5

    40b796e0906a7df31b15deb4c02f0248

  • SHA1

    61389b31e11052bf92cf83bfb799392576afb298

  • SHA256

    57ee90c92f64cae2ee9b0ce6a4891037941794085c9c9911149ae560e7954a94

  • SHA512

    ece6a7911b520c94fa0754b410983e6d4d782a54d202b777e8113b150cfedbde20db305bec81a9c680e5d60fb9f8782c194c3f1d24c60966fd94f75d52359dc3

  • SSDEEP

    6144:vqTeK45vCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ7v:STeg

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2