Extracted

• • Target

    958c4d790fc09b81601af9e14d3c54f9fcdca7a2208a19a9f5fa37437b743ed7N.exe

  • Size

    64KB

  • MD5

    7d2947d1cf4c14eadf298e1468819ec0

  • SHA1

    9dd7bf2ad7126b22db2fc965128171efa619f279

  • SHA256

    958c4d790fc09b81601af9e14d3c54f9fcdca7a2208a19a9f5fa37437b743ed7

  • SHA512

    1a85a4547036bc9ed03449a819d4bc4e5b36ab47a751ecf1095683710a4d11f3c4991090c2bbed52075b8c990c26921df243385f7750f4c3d82a0ff2c67b7ee7

  • SSDEEP

    1536:xDjSgY2lxtJkRDelV4AUXruCHcpzt/Idn:x3fvFkZefbpFwn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2