Extracted

• • Target

    2bf54e54a0635cf9f9a33fd717ebe93ea72ca5573e663595b45ec91503c6f50dN.exe

  • Size

    113KB

  • MD5

    aec67c9886b48884d20fe5538174dc20

  • SHA1

    933f3a54dd9631571ceebed10d60ebdcf3d8b149

  • SHA256

    2bf54e54a0635cf9f9a33fd717ebe93ea72ca5573e663595b45ec91503c6f50d

  • SHA512

    48cc9cce1c6be0354a979f7bf2b53e246d7d3507ce28d9fa892b9895160632ea3caf04c8bcbb91f87e92fab27c8adf5339c8fb5f2acf615d79ee00fb1a396ed8

  • SSDEEP

    3072:YOXgOEjnE+bZye68OuGkZFfFSebHWrH8wTW0:YagOSn/Vye6R7otSeWrP

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2