Extracted

• • Target

    b0d5844d3d079968632dea6988934709f10f2c39adc4c1f867288f4eb50b429c.exe

  • Size

    97KB

  • MD5

    a11802b5ac38eaed2e9a85bf27980cc5

  • SHA1

    5b341e71432fcec0229c7aad86299d440c7d1712

  • SHA256

    b0d5844d3d079968632dea6988934709f10f2c39adc4c1f867288f4eb50b429c

  • SHA512

    5ea2ea490d8c69a3a46f7506c5ea8cc5bda07b6f43917520cf233f5c9e8d548aed7bac7fbecebd59d71bd2cd2f4dcfbaa19556b164eec8aee68a433ae55fda97

  • SSDEEP

    1536:OQhfy4ke+PzCxzuyBlQBfcHVBXUwXfzwE57pvJXeYZE:OQ8Fe+7C5uyK01VPzwm7pJXeKE

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2