Extracted

• • Target

    8bf543bbb6d94933a31ddd2bae61f80bdeb62127d1d100eeb62cf8f8ca0616c0.exe

  • Size

    800KB

  • MD5

    e7fc88a7ee47bd5e73b224b23aa839be

  • SHA1

    64843fc0c6311719029e620918f1f9ceb9135442

  • SHA256

    8bf543bbb6d94933a31ddd2bae61f80bdeb62127d1d100eeb62cf8f8ca0616c0

  • SHA512

    2e6313c4594fab2cf4600abf682290a775500750e035fcfe2ea3244c4d1abeec115f97a831afb0e2dd867e44ce5833dde369aa89968e631a0dc36abd53a3fddf

  • SSDEEP

    12288:rIdc3R/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KFHTP7rXFr/+zrWAI5KFum/+zW:rIdc3Rm0BmmvFimm0MTP7hm0Bmmva

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2