Extracted

• • Target

    19e3acba167b534ce37a0dbe377da8e598505185742024bf31b0309d7eab943b.exe

  • Size

    55KB

  • MD5

    6feb5a56c21f2363af260aa4b1a9a257

  • SHA1

    7808c1d535158c71916b46e2d3abe57bed7641c4

  • SHA256

    19e3acba167b534ce37a0dbe377da8e598505185742024bf31b0309d7eab943b

  • SHA512

    2a56e7093458a24e0aa7d2cf9109d50d58b2a97dae1b6df911d4e3a1ef386bf44553925d042b2d40f5cc389c2ccf4bf59ee3dbc3a810176766b954f2530bcf4d

  • SSDEEP

    1536:I67xAb9d33rSK80GitP00Q7zVOnNSoNSd0A3shxD6K:VAbDY0TbQ7zInNXNW0A8hhz

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2