Extracted

• • Target

    324c2e2d43b709bc8e46bdaa8dec2ca44d7ee48dda56265969d91371187038d9.exe

  • Size

    181KB

  • MD5

    7d2d88f76806d5b86ad4f842f4969438

  • SHA1

    a84a844143bc5d6791433aa7474b0f18ba159cb0

  • SHA256

    324c2e2d43b709bc8e46bdaa8dec2ca44d7ee48dda56265969d91371187038d9

  • SHA512

    ec65adcd7cc6f0906161060bd38b65320d817a8f84f02aba159b7da53800dc2e0fdae6eaea5f29abd95d86a6485eddfbb0195cf2e48918a7b704ef32f17c59d3

  • SSDEEP

    3072:x8VcTE8cqI8rDrFDHZtOgxBOXXwwfBoD6N3h8N5G2qVUDrFDHZtOgN:nTiq/x5tTDUZNSN58VU5tTN

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2