Extracted

• • Target

    9c39c400a91ecdf5356b89ba3c08b597269cf9b8cf1fd11e33c9355c158d573b.exe

  • Size

    422KB

  • MD5

    9c235bdf501de25595e4ed1968c1e21e

  • SHA1

    61eecd389de02d18c408300fdaa6d433520a29b1

  • SHA256

    9c39c400a91ecdf5356b89ba3c08b597269cf9b8cf1fd11e33c9355c158d573b

  • SHA512

    8ca6bb9214880b6eed1314b12d7269a00ed81416198cc1b512e47f81ee43c2e79c3d4b4a8c33dd42526b34c3e40cdadfcd6dac246781b6cd016432be4b1599a6

  • SSDEEP

    6144:LJRZZed+x+babO6FSPnvZU1AF+6FSPnvZhDYsKKo6FSPnvZU1AF+6FSPnvZO:t6GaXgA4XfczXgA4XQ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2