Extracted

• • Target

    be823c7a6375f1cbef930620306c97f25a27e3c18af501295cd248277f2dae0a.exe

  • Size

    45KB

  • MD5

    2c92a08b9a77dcba48d6b80c7c69964d

  • SHA1

    fad81eb45cbaa24b21b9f07312a20d6343287741

  • SHA256

    be823c7a6375f1cbef930620306c97f25a27e3c18af501295cd248277f2dae0a

  • SHA512

    b877daf88004fd12fc4c6262aad9ddc67d44767532cd3737289058b964b870fa97c3e4987b304ab4581a35d6b356fdfdde0d21ab8a14485ef4157d03ebe6e214

  • SSDEEP

    768:nta+Nl54s+oNvR3EnUlFlCwE6zV+ul9w9vhNuPs/1H5+I:ta+2oN5cF6zH9QvK6X

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2