Extracted

• • Target

    1e707b25f13a4226fc71ad1b4774864dc03d80bbdc646f6a1866f6163345b7aeN.exe

  • Size

    301KB

  • MD5

    ef19ced8dc17492bdf63dca957439c40

  • SHA1

    b4d10902029992ecc94d8a94dc51462463322839

  • SHA256

    1e707b25f13a4226fc71ad1b4774864dc03d80bbdc646f6a1866f6163345b7ae

  • SHA512

    a498fa7517a54230fcd8da5121347472157dadb89e092fe9062abf3c88ee9963ba0c2e50e91d22092e7ee7b66e7014524041c557baead0874ec8e18e3b2a9a62

  • SSDEEP

    6144:IeXgnp9mZfm+kte+MZmYm+DakBpvXBwNBezP:jXgnFe+Y/+TezP

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2