Extracted

• • Target

    5c47a9b2c4e9e71b831471519a89287a49e31c2d7c1e7bd1191c5c3fe2bcbfd1.exe

  • Size

    64KB

  • MD5

    1e24933c738c50c01f3a783158bcff33

  • SHA1

    26cc026f082ca52fc8b22a2b0d8f4669bd54ef01

  • SHA256

    5c47a9b2c4e9e71b831471519a89287a49e31c2d7c1e7bd1191c5c3fe2bcbfd1

  • SHA512

    1b06bc34dee50d295c212410da88409ed97463b0e3c9d6468292db645065674e30152e4b4a9f63a9edc4636b0333bdc8eb4449f477aa60485782be017a8f16ce

  • SSDEEP

    768:QM7ncUJkWUXnRQFS8NYCk235tyGUzT50t0nKm893HygvUBeP9esM/1H5/6XJ1Iwi:QMqpD86V2eDPLEHydeQsCsXUwXfzwl

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2