Extracted

• • Target

    d0cf063b6fe9373aae6653b8d5d85622cd505347f6805aa359ad373f48f02e90N.exe

  • Size

    91KB

  • MD5

    4cdfa77f442f5dc5e8b8bf4b3d4e3d00

  • SHA1

    6e0e80fccbe65a1e7f140d8e4e2f3f0d0381dcc0

  • SHA256

    d0cf063b6fe9373aae6653b8d5d85622cd505347f6805aa359ad373f48f02e90

  • SHA512

    18107b2c55c226b59a4ce35f2b5df93b67419bcb94ee3da491b33a012ab1a90c9d38259a774cdf52ed4201476b426e5874fa6d51a3637860bb3851d8d0b2c800

  • SSDEEP

    1536:mmwk2453hIuhhgDC5p4AInLyDXdi8pE4g5a3iZ8saqYko:mzi3WfC5phVDN3E4xSzWP

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2