Extracted

• • Target

    f722bd943d9d9b1c13c5d4d8f0ace86c92f37a50726f53bf14a52c15ecd6dd8a.exe

  • Size

    344KB

  • MD5

    87c5dc08ad240eb0c1f0e0befb2fca59

  • SHA1

    9175b9e3702c9fe035c75ec0f1f570f445536e6f

  • SHA256

    f722bd943d9d9b1c13c5d4d8f0ace86c92f37a50726f53bf14a52c15ecd6dd8a

  • SHA512

    bc824726268c90bbff67a629260056a17d2b757a9ec4c5725121ca6b6598affbc8618c4b419772773dfd6aaae207781f4abf3179861dea46cdf79802c12adb38

  • SSDEEP

    6144:V7DkjmZB1CpX2/mnbzvdLaD6OkPgl6bmIjlQFf:ZCmZTCpXImbzQD6OkPgl6bmIjKf

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2