Extracted

• • Target

    3043ebc922270a64167ddf4284fb82eae6c9ad7315af72f85a71124f20178beaN.exe

  • Size

    88KB

  • MD5

    5602b2509775b09b238bf1e8bd3789b0

  • SHA1

    1a4da235e63d7422a1c16352f0e448975e4ad1ea

  • SHA256

    3043ebc922270a64167ddf4284fb82eae6c9ad7315af72f85a71124f20178bea

  • SHA512

    135bec130a63e5478b083a9b9d0cdb1f06c1837819c09875b8a714f7578b05bdd060cda1aa618004480bccc080b539b68c38bf241d62a8cbab943cbd31db0580

  • SSDEEP

    1536:fie6s3MSrvUKbip4hF4+ZAKwFL8QOVXtE1ukVd71rFZO7+90vi:P6scSL3bip4hFTZkLi9EIIJ15ZO7Va

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2