Extracted

• • Target

    a822b9af06ea35dd5fe88c2b74bf7d623e746c1db0cfa1f08fb7d230d1eb5706.exe

  • Size

    84KB

  • MD5

    3f0df5dc82e01d5577b7fb5806043ddc

  • SHA1

    13aa59ceca30c657a8fac9bedab24c4f3ccf9e8c

  • SHA256

    a822b9af06ea35dd5fe88c2b74bf7d623e746c1db0cfa1f08fb7d230d1eb5706

  • SHA512

    07d57bc26dd3720602740504e81a1d5700ede3ae284fa3ce5cd3368d4673d7086b0681400c57831e369464b89e4df588ac6100c4f1aca3755d7e73caf0665a53

  • SSDEEP

    1536:xdRbtC+zTvNX05fGFJUcfctVySu8ANZLvfPDyH6n8dEelLYR7xeGSmUmmmmmmmm0:xff7x05fhftVy/3PDyH6n8djlLYR7xrt

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2