Extracted

• • Target

    4c12e1d097a60dc74011e39a976ae8104916acbcce8d72b2910751edf26aa457.exe

  • Size

    92KB

  • MD5

    355648385f5f2f3d151b18552f747f92

  • SHA1

    3d552ee5faec030171e576dec2aaffe9d8aa1b48

  • SHA256

    4c12e1d097a60dc74011e39a976ae8104916acbcce8d72b2910751edf26aa457

  • SHA512

    6b5053bc6c66ef01ce09a9a2166a628c8608d50b62319df6b39ac0c4d01be93a919a3cc10a9c46244131f5bffbb2d924f04eae9065bafa629a8ba639769f24c7

  • SSDEEP

    1536:YkFQETSVdnNr1Zca0PkZFEGWOsT8l4110OlO7uXcNvvm5yw/Lb0OUrrQ35wNBUyu:aVMLHn10J7usluTXp6U9

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2