Extracted

• • Target

    9db65159da1bd8ec8121aa5b313d7742a3aabbef690727b342b46248faefd0a3.exe

  • Size

    512KB

  • MD5

    2bd8795c2e1a5e2d977f2c121e53e6e9

  • SHA1

    8ab736299e556dcdbf414c103e235fcc47ac1f60

  • SHA256

    9db65159da1bd8ec8121aa5b313d7742a3aabbef690727b342b46248faefd0a3

  • SHA512

    4c2ed3d7494cac5cfe3a13778076133e0b7090b3a71be71248302805eeea6dc2437432b4eab6d51e1e981d0129e3d17884dcf62e41636d4eed8c04c2649d9e52

  • SSDEEP

    6144:zDBYUUZP8VU5tTO/ENURQPTlyl48pArv8kEVS1aHx:zFyUG5t1sI5yl48pArv8o4R

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2