Extracted

• • Target

    a785937fcac5ef6721c5b47354c10cc199c1bf76d882fc4fdacf31fe58322f0cN.exe

  • Size

    101KB

  • MD5

    e8cbf7ab625e199357f89334bc1720c0

  • SHA1

    a51248cf79051f6db4bb01e2ff693ff772708059

  • SHA256

    a785937fcac5ef6721c5b47354c10cc199c1bf76d882fc4fdacf31fe58322f0c

  • SHA512

    38d95a51447f3e73d028e72c401831e4a2ef2b41ae7285fc0486634ac9e8141ac361d9e18589a9c1842ce86aec0867e12d0a078daaa7af90c07021cd4759d3e4

  • SSDEEP

    3072:ikKPT30ZnE47JduXqbyu0sY7q5AnrHY4vDX:inT30Jf+853Anr44vDX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2