Extracted

• • Target

    434d4986391ec76439ac970ee2a7e9e4d6e7cb2f18ff414fa859a59383540257.exe

  • Size

    64KB

  • MD5

    9bd516f954b22d203bca3ca892b57ad3

  • SHA1

    c6cdd7f00e88d6133ee4e3ae989fa27caaaedb91

  • SHA256

    434d4986391ec76439ac970ee2a7e9e4d6e7cb2f18ff414fa859a59383540257

  • SHA512

    43d9a9099a6870581abe922143b6b91ce151e8d7f39ecd7d17e28e9167552ec411e4f1c5e66e98ff2f820ea8d8e97ab8a88c1b906ad050b265f1a983490429db

  • SSDEEP

    1536:a21zbY3/rKpYFJFQUBQr6GE90DinU8TW9NlLBsLnVLdGUHyNwG:BNHpYFJ+AQWGEqinpqrlLBsLnVUUHyNX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2