Extracted

• • Target

    ff8a7f04d2b7b9dc58023a077448e5a2cd32965f4a784d30da02e52eef4f5eae.exe

  • Size

    64KB

  • MD5

    0cd6000f1f9e56964ec6f816f03782dd

  • SHA1

    7a63ad605750ae4624263d0ea2bc668f7ad38208

  • SHA256

    ff8a7f04d2b7b9dc58023a077448e5a2cd32965f4a784d30da02e52eef4f5eae

  • SHA512

    c04adc531ab3c1fbc3b8d6342a35320d7f7aaf1331e55cfc4352e61752968915669c2b70ef21d8daca22a468c8762e86c5f6bd0de8dcb1bc3e6a572773a731a2

  • SSDEEP

    768:22/j1L/q6a9josCnCjamcfFRmqBgDabC/1H5Ee6XJ1IwEGp9ThfzyYsHF:F/j1L/q6a2sCCjJcHm6E+7XUwXfzwF

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2