Extracted

• • Target

    deb3dfe27f629cf37e25b07e58f476288dd9f1aa7e41b990a0a31a0791ebc78b.exe

  • Size

    45KB

  • MD5

    dee0c7df5035c3301d6dc222e9a50761

  • SHA1

    a8c23b39f41ad90f83401af0fe3a51de86b9dba0

  • SHA256

    deb3dfe27f629cf37e25b07e58f476288dd9f1aa7e41b990a0a31a0791ebc78b

  • SHA512

    f41c57e539820069f950f4140bdc3af0e4f1841ac90df2f267886887d3d92b91b654f2bcc4e31f0fb311e794a3cb256cb6d93068a9e4af313c1e5b296202d650

  • SSDEEP

    768:zHje6XjWani6ygSkWSZNCETU/HCPq+i+iL9u5Er3/S/1H5v:zHPni6ZzZbU/cq+i1LwCs9

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2