Extracted

• • Target

    3ab146ffd7fb5cdd0bfe9d45244f2a012bcebf7936a27a3d28f4650443b173cd.exe

  • Size

    364KB

  • MD5

    e5e30808344ba21aacf7805cb3e0a2b3

  • SHA1

    c48b33919489a93f0cf7085cc1022244dab0ecc8

  • SHA256

    3ab146ffd7fb5cdd0bfe9d45244f2a012bcebf7936a27a3d28f4650443b173cd

  • SHA512

    dba5beeb7ee58ec587517fb5271c1fa2470584a50a1c23911c6a815cb4b98be578a0ad394d13c7e3ebc0c814747385f374c84a52b01fd1d261d98a056fbf852e

  • SSDEEP

    6144:NnhQituuu+qsFj5tT3sFxHnkO/ACmLksFj5tT3sFO:1as15tLs/EO/ACmgs15tLsQ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2