Extracted

• • Target

    338bc347b2948a451bea3bf7f6c1967e8fa630e18f50fc3f6a0923bea6f0cb47.exe

  • Size

    250KB

  • MD5

    ab83123ad3c422913f9e4319497db66a

  • SHA1

    93b1da9eb326915bb20ed2adf483e000a32ba78a

  • SHA256

    338bc347b2948a451bea3bf7f6c1967e8fa630e18f50fc3f6a0923bea6f0cb47

  • SHA512

    05722cc1b4eb97fd7f2d26299a249774ad43ace3848e5bf5a998ba05ef17d00d3b27e6eea634a13f9fe6876306c4c7f52a9dd1dc24e6b5bbe98913f7baa1b78b

  • SSDEEP

    6144:2oXBNTYFvCvfmZ7KRRRGBCvfmZ7KFpNlJTBCvfmZ7l:2oTTr

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2