Extracted

• • Target

    b8b75fa516b4fcdc37cec693192032994049d1128d9b1224e92ea1500dd1bbb4N.exe

  • Size

    52KB

  • MD5

    553d9758520d8dcc1c809dfbfd5f3e80

  • SHA1

    d7ed71e17fa7d311718d9dac1f0b6138f83c751b

  • SHA256

    b8b75fa516b4fcdc37cec693192032994049d1128d9b1224e92ea1500dd1bbb4

  • SHA512

    0a6eae2edb364406c36778c47ecb9d2fd76e7201b5e7e324f4b487f6bd873d8b3928035ec00fe50eedd52257c03ee1a4212e441cc34421440d6ab36a444f4c3d

  • SSDEEP

    768:Ywq2I3bNWKU5OtrNJSp0jfHtkgobjC261LDZVGTeifn1K5/1H5F/s7goMABvKWe:Ywq2I3pYQNLDtSi261aT5ksMAdKZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2