Extracted

• • Target

    df24296bd07d54c5929e3b1aca527fb826360953adb07bc042abb7d647070be3N.exe

  • Size

    101KB

  • MD5

    d163cc077c188db15492ba1fb353b7a0

  • SHA1

    d35ce5f11c77bf994d1daef45a211088869fdf9d

  • SHA256

    df24296bd07d54c5929e3b1aca527fb826360953adb07bc042abb7d647070be3

  • SHA512

    555801e0ababb015c5d47ce0b3b3f2dee73922aec7d8f07e618d34b7edfba99c243c25a32dcced4acb7d76c951392530dd3036ba0016c2dbb20f91607a4c8620

  • SSDEEP

    3072:r7QS4CWCy3A/6ukz4duXqbyu0sY7q5AnrHY4vDX:nHd+/853Anr44vDX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2