Extracted

• • Target

    2ce9078448184916c1ab248a88231d6398d41cb876a8431aafe35e01e0b8960eN.exe

  • Size

    1024KB

  • MD5

    ad0215052710fcffbf02ad83ca8cdb00

  • SHA1

    8c91bb19acc08f4436f075aeef0cb51bf2524a0f

  • SHA256

    2ce9078448184916c1ab248a88231d6398d41cb876a8431aafe35e01e0b8960e

  • SHA512

    546700693089f86bc723c87b55411bba6db96c65cc16fa2b9a349dde0b138eabe3f1cb1df20200d003a6b4f85f1f0e1d61699389c1dc7681d04cd92686063078

  • SSDEEP

    12288:9NaOzSwkY660fIaDZkY660f8jTK/XhdAwlt01PBExKN4P6IfKTLR+6CwUkEoH:hSwgsaDZgQjGkwlks/6HnEO

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2