Extracted

• • Target

    d839513ae7061c2d81a5ec73e782867deaf5ac7e17b45afa262dec6a0b6155fd.exe

  • Size

    344KB

  • MD5

    2a66bfc0e6aa3e22d30001c7ba458da5

  • SHA1

    444cc064d27bb803f7012d352e62112e954d2a61

  • SHA256

    d839513ae7061c2d81a5ec73e782867deaf5ac7e17b45afa262dec6a0b6155fd

  • SHA512

    23dcfd3764415aecf794bc950a0f14e07f34d9a93b40ea8385116361b3ab7d592069bf2580df9c7b36f27e357c36239b523fa305439f6666c8f6b0fb27a2ce11

  • SSDEEP

    6144:HK0222VCpX2/mnbzvdLaD6OkPgl6bmIjlQFn:H72LCpXImbzQD6OkPgl6bmIjKn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2