Extracted

• • Target

    f17bcc252b14a30a856af32b64aa0787c74369129cdb18447f3dac844a551484.exe

  • Size

    800KB

  • MD5

    8b606c33f600b7b9a284dbdb648ee942

  • SHA1

    6781f2400babc21e14cb3f54e07c44d3f40464a8

  • SHA256

    f17bcc252b14a30a856af32b64aa0787c74369129cdb18447f3dac844a551484

  • SHA512

    ede33024bd425186f8e1b23d4f8d55d7cda17a82586301357bb9fc876d765f8fe114bfb36fbff72fae3e63eda870ba2a0e76247446e31e8c97698e6a40443d8e

  • SSDEEP

    12288:qV1/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KFHTP7rXFr/+zrWAI5KFum/+zrWAc:qTm0BmmvFimm0MTP7hm0Bmmvu

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2