Extracted

• • Target

    bd48071b7a3c8050815890f47e1c89b0333d1d95d7fdf7d819f371f1665713abN.exe

  • Size

    128KB

  • MD5

    db9600cbe71e953f2c5bd5707ab0fce0

  • SHA1

    0ca5fa19ab97256d3560f31d4edae3caa6553ebc

  • SHA256

    bd48071b7a3c8050815890f47e1c89b0333d1d95d7fdf7d819f371f1665713ab

  • SHA512

    3d69047692ceb897b7fbb859aeb19522d3a923260fc08f247bcb879c3996670832a9019b78ed3f95d558854bbabb2e79ac3dbec351a57298974386d9cf209f73

  • SSDEEP

    3072:zzgoxDcQPP0CREXdXNKT1ntPG9poDrFDHZtOgl:zzgyPPLCN9Otopg5tTl

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2