Extracted

• • Target

    72d444684b53e97716353ecb945534ef24bcef78930520f57cc8c1d3465d0601.exe

  • Size

    219KB

  • MD5

    62d0e24ac07be5a47fd01b518ad133f5

  • SHA1

    0d03010df70a7f3be7bb172df0cc588e94306f3c

  • SHA256

    72d444684b53e97716353ecb945534ef24bcef78930520f57cc8c1d3465d0601

  • SHA512

    3993232891a130291edea2ccb6431eab3703f1d4e7a930d08dee608602c155935d0a44ab7cca7ebae6ed271c483ae1841261aa32cf771d59d53c33c38689aa4a

  • SSDEEP

    3072:ENCNyolpDpzSXmLrqeqPzwuZkO0aDb/IBPCOQvU6z314EXrjvwSfYrwBtQ:9BpDzzAzDOO0aDD4PCxdXXwSfYrwBG

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2