Extracted

• • Target

    c8bd11bff14df6eac7e4d905bbeb8e8c446e1892a99c1b201d41a52595bb4d1cN.exe

  • Size

    64KB

  • MD5

    c9fed09d624e57b3a3cef457de5212f0

  • SHA1

    6a0400765f4e93d3fe7029c3f1742743809b4567

  • SHA256

    c8bd11bff14df6eac7e4d905bbeb8e8c446e1892a99c1b201d41a52595bb4d1c

  • SHA512

    c839910272739d19156f38432816ec7c7ca24ae38757f6b702890de7b60b79d410b3b0468e8aac16436fc1bb28a80749324e3e60174caf9192f281249b52450d

  • SSDEEP

    1536:Dv9M8uCtNfJYZelxprO4mbWyBrPFW2iwTbW:L+CtNfJYZelxpa4kX1FW2VTbW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2