Extracted

• • Target

    2ccee7ee3f6f7ac9a995939674d70053f55f9bc8b59d9bbf0c695bd899388ff9N.exe

  • Size

    84KB

  • MD5

    72bfe3fd1a28c7f9287109025fa1f9f0

  • SHA1

    8ea7a0382cce4574227b05f82a13c91e32e774b7

  • SHA256

    2ccee7ee3f6f7ac9a995939674d70053f55f9bc8b59d9bbf0c695bd899388ff9

  • SHA512

    66137807fb509e47a1e3ae912be2380a5ac861cd896096c40cff9c9ad2bae3696daee3595a88591feed8153e236c6f6c134c523221a6ec53b79d6648386d6531

  • SSDEEP

    1536:a1NR1MbusUdeW07wVos7OkXxusXSREXHfVPfMVwNKT1iqWUPGc4T7VLt:aL1IkOkgsCREXdXNKT1ntPG9px

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2