Extracted

• • Target

    ffad883a40ce049be84b725f46a8c30cbc7bc210d94cea29e6bfc415e9644d12.exe

  • Size

    101KB

  • MD5

    25cf743a8043d9bf3c84c46bec0b97b5

  • SHA1

    84db9ea41e6e8560244e9a5b52c33d74d47a7a54

  • SHA256

    ffad883a40ce049be84b725f46a8c30cbc7bc210d94cea29e6bfc415e9644d12

  • SHA512

    1c1e3933ec8761328dbe03c25dbfdf4f3ee0112859c5e9570125c82d0b1351fe245ea84279e1782a50d6aa2b3cb22e3b9cb5b24757c08274a62bb69865a3c474

  • SSDEEP

    3072:9p6rl5yWWFduXqbyu0sY7q5AnrHY4vDXr:9kmi853Anr44vDXr

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2