Extracted

• • Target

    e65dc31a0e8bbff5e1c4df70f63061e87dbca616f1ffc5c76f2df5c3c872a5cbN.exe

  • Size

    45KB

  • MD5

    ff650fe3ba5e2bb96d7d03ea297a4aa0

  • SHA1

    82d69a3ae50eb70abd579140b0006868f5878bed

  • SHA256

    e65dc31a0e8bbff5e1c4df70f63061e87dbca616f1ffc5c76f2df5c3c872a5cb

  • SHA512

    9a42954b2de4075ed8228f5ef6ec7c57819591f38709d13d50c08ab8f3fbb94470d2ded30e642785c071801254d22a46541fea4d55d9d9dbaa934af0a7b453b1

  • SSDEEP

    768:QKOmnf1azRTGQsLG8G4mFL2HpyMnvQDvPF4sS4iKi9NiRhzH+/1H5M:0mnf1a9YLzlmFL2HpyMYDvP2+HXRhzEO

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2