Extracted

• • Target

    7d2b8c59a7e046f7eec98bfbbf403240fedf5161e36a74f446924efc1b6ad646N.exe

  • Size

    91KB

  • MD5

    9904fe5d56f249c0c12b885eb4fc84a0

  • SHA1

    8231418172c190ba9a264bef65c235c9ac2a3906

  • SHA256

    7d2b8c59a7e046f7eec98bfbbf403240fedf5161e36a74f446924efc1b6ad646

  • SHA512

    0f29d07566ec39c6002ee1005c3bf37597023086a7eb843949331345b2ecfdc12770e7d89bf92717b74327ca5cdae9ceafce8995dbe4533c02337df48a9010fd

  • SSDEEP

    1536:VypcgsHF7jmR0gba1mLB1FD+riC3FSr7TiwkU6joqqIVLg+:VmcguF6Y1gBvYvFSr7TSUurU+

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2