Extracted

• • Target

    7e683f84177a103376eedd6281bb98f0ed0bb7648c67170ca292f55440ab5fb6.exe

  • Size

    42KB

  • MD5

    fbe74602ecebb226c8ee48435c44fff8

  • SHA1

    5d09cc42491006c74127799a1b284aed1551a4d3

  • SHA256

    7e683f84177a103376eedd6281bb98f0ed0bb7648c67170ca292f55440ab5fb6

  • SHA512

    c4870c65aa97f8c56c3e67f288ad60c071f624cd49d17e0558687f833b4b80144e3ad9468a34f33b5bf2660aea4d7fdbae6d667426c232d1ba0812ded655b55a

  • SSDEEP

    768:sXH/eDERkLpp9TgGlgJ2TOmGTnejWNBL9m+3vTfsq/1H5Y:yWDHLp7TLiR9BLn/Dla

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2