Extracted

• • Target

    d8c5350d8339918fb7062bb5d67b465cea6b7de60b6b792ade12c7663ede4c7f.exe

  • Size

    97KB

  • MD5

    af37838b749fc801a6c33c697d24a377

  • SHA1

    8bf3d65751937e2bd140a72af6b2077d0f55c860

  • SHA256

    d8c5350d8339918fb7062bb5d67b465cea6b7de60b6b792ade12c7663ede4c7f

  • SHA512

    316940b0b182a9129f73f242ddaa291e742eb1b9fb3e260dd92b5323f1396eeefdee4dae6fb3a6f7cdf0f993b1f950f8a9fe1c8bc714d2c78f44c227e44b51a1

  • SSDEEP

    1536:nrapQ9WdvuVEsPHlTQ6+VKuXUwXfzwE57pvJXeYZE:up8auPHW6+0qPzwm7pJXeKE

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2