Extracted

• • Target

    4fd5affff9b2d4e74f4039caefa321bf91d438cd245ae45dbc2d2c66fec66188.exe

  • Size

    335KB

  • MD5

    bfdae08b0daa9b94eed72afe6a09840f

  • SHA1

    500a5448562f216c49010c52798bde04b378aa6d

  • SHA256

    4fd5affff9b2d4e74f4039caefa321bf91d438cd245ae45dbc2d2c66fec66188

  • SHA512

    91fc69180d51798dafca8a05a46639217cd8ef2f737bfcd32b2316e0d7e700a532ab149b6ed5e8ce0df97aee4bb4e61e71fefd09430a8f0c4a7bb2bc39024103

  • SSDEEP

    6144:O4xUw/i4vvLvwU/4qwvwU/4qvvwevwU/4q+vwk/4q5:OS5iA

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2