Extracted

• • Target

    9afd2b22fdb7b2f68a41ac53bcb6660183aefb3b3417dc82997fc7a8a7ac2474.exe

  • Size

    428KB

  • MD5

    c495301f658dfcaff408d6960d1f8a02

  • SHA1

    c80f4ccc4b0b942840052c7ce6ea6123be55bb86

  • SHA256

    9afd2b22fdb7b2f68a41ac53bcb6660183aefb3b3417dc82997fc7a8a7ac2474

  • SHA512

    3b7e83937779bef59afb2fd09b3f60acc2b2b96cbdaba57d9d154d7f2be45fc7254d2a7594a3852bf6c52c9bcf9161dd3f52ccbcad1df1f68bd6ad4a40b8c1a1

  • SSDEEP

    3072:ZLau+8382yNMEb+Z8mnaoPav8Wz24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5ZB:ZdTSNMEi5ba4sFj5tPNki9HZd1sFj5tw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2