Extracted

• • Target

    fe3112e1cc0d83f651689edcf3f399ada85a4848c51ec8b28dc7f44cdeae11ae.exe

  • Size

    92KB

  • MD5

    76d1abaadec4dd1ebc5cae5d540b0cd1

  • SHA1

    86bc2a45367f31fbc5c600ad3973e4f052bb15e6

  • SHA256

    fe3112e1cc0d83f651689edcf3f399ada85a4848c51ec8b28dc7f44cdeae11ae

  • SHA512

    8a993aec0d09eb0469b00677efd7887cf199c26852b932ae573f49c5f561d46d4f28d54728e3f14b84f849d581b8264a0a5737ba646776752f2eb58342314b10

  • SSDEEP

    1536:ekDFzA+0fWWBSEG01dnw8dMEwzOaYRdTZllO7uXcNvvm5yw/Lb0OUrrQ35wNBUyK:s+uPDGIdw8dME6OaYRdTZ+7usluTXp6M

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2