Extracted

• • Target

    5b72bfc1b750db3a9ffb82565f0ab69c66f1875a5e6d8a1ee6956b1d5bdb1d7d.exe

  • Size

    85KB

  • MD5

    fde98c338996cb9ec8cc3f405d01ab19

  • SHA1

    bb31c9e573cea18078c332b6f857580548094b77

  • SHA256

    5b72bfc1b750db3a9ffb82565f0ab69c66f1875a5e6d8a1ee6956b1d5bdb1d7d

  • SHA512

    ba4380584d5b19e50d7eaf40f9ffdcc6c8db5c12e86955a71bdf382fa19b7a3e28343f101914dbb08419c4978536e74f9b7153de00161d22bf63ca657ed752ab

  • SSDEEP

    1536:7v3qZdrklpfctv8psqLQjyb6TDlO7uXcNvvm5yw/Lb0OUrrQ35wNBJ:78opktvcsqLQjjs7usluTXp6J

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2