Extracted

• • Target

    2eead12b62c4b08dbfbb63eb6350ef0ab7c6c9c3b6bddc9d10a314bd589c6044N.exe

  • Size

    301KB

  • MD5

    3cc7a00c80dbc40d434d0ef127a1dce0

  • SHA1

    45bc3aa0efb762988f03cc98f128ea54e53382b7

  • SHA256

    2eead12b62c4b08dbfbb63eb6350ef0ab7c6c9c3b6bddc9d10a314bd589c6044

  • SHA512

    421792fc77c0d1c32d9fb90198207b7e8a494edc497f1ddc86238fe677668c2430a0274d334359738885691cdfa6283846352e24c3ec371a49a229f8c4065c1b

  • SSDEEP

    6144:VkmOmZfm+kte+MZmYm+DakBpvXBwNBezP:oe+Y/+TezP

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2