Extracted

• • Target

    95da5c01cd2423d52335d927d714795814e1b86f850534c6fe8e2d65e9f48a4b.exe

  • Size

    92KB

  • MD5

    1797d6179c8d676a4efba1669c550d17

  • SHA1

    3d7099692d9177893c141f618d9cb09029bd94c2

  • SHA256

    95da5c01cd2423d52335d927d714795814e1b86f850534c6fe8e2d65e9f48a4b

  • SHA512

    8dc0af23c64241e760832356c522439cb56bd8b39059f8572a07446f3872e942e97f4848e34f17c5dd45968ccef03c309adeee296adfefa099f98c5171bc3713

  • SSDEEP

    1536:sYzU7b0d+AM1qHE0ysW4AQ1zlO7uXcNvvm5yw/Lb0OUrrQ35wNBUyVV2:TU7b0dGqHQP4B187usluTXp6Uf

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2