Extracted

• • Target

    0e008b8e1ed5bfb60e1f7ac25b349f45c104a877c6055ce5c1eb8aa81b046e26.exe

  • Size

    194KB

  • MD5

    6546c55f35d9bd8d2f116e1b02474e2a

  • SHA1

    89c51b52a8065377b8ea44d26e5aab2df2965f38

  • SHA256

    0e008b8e1ed5bfb60e1f7ac25b349f45c104a877c6055ce5c1eb8aa81b046e26

  • SHA512

    eee01ac5429cb7ba129d3dbc07e4a4dfaaf370b622741100ca7234bc9ebf17b44eafc8ffa74b7d1ae2235e1b526cad106e0e4cd96615546e180057ac4030a570

  • SSDEEP

    3072:84g8TapOpdb4Df+mMIM/kEmMIGumMIc/1Gl:qAjC+5/pbuh/Ul

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2