Extracted

• • Target

    8e2c54f96e221499d08cfb58627b8672dd64da92e5eaa2ca28be1a35d9234cfcN.exe

  • Size

    72KB

  • MD5

    d2bc0a8e0e1d93235f7521093e77bb50

  • SHA1

    e948fc091952dff88c2428ef938d5be8d0ba9778

  • SHA256

    8e2c54f96e221499d08cfb58627b8672dd64da92e5eaa2ca28be1a35d9234cfc

  • SHA512

    f7cbbcd55f21a5ee9a40bc8face75b038735f42d39223dd596ce1a07d0e2766fb17c5dd393bbaf7605c509d7f0f70365c58c02db1a1d76499a92e550d341131c

  • SSDEEP

    1536:GHBmGHxMfp1CGgMAwoXX8RXblAMPgUN3QivEtw:SBmuMfzCGgMhRJAMPgU5QJw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2