Extracted

• • Target

    a37f64107bad1d7b835d7790124a418fc385910dadca81cee8f3ec507798feb4N.exe

  • Size

    128KB

  • MD5

    1fc13f06e689018710435867bbea3660

  • SHA1

    dbe0ac6efd5de0a47bbbd2ff4ab1891981c381be

  • SHA256

    a37f64107bad1d7b835d7790124a418fc385910dadca81cee8f3ec507798feb4

  • SHA512

    61f37102f0eaea3ce901e28dbcdcf122fe7e89680087329a970f9ff1842a7b0120a8f076dbde63c37df05003adf0a0529cae3237dd2429ca895e5e109c5d8621

  • SSDEEP

    3072:NlbVN4oQt6Zym/PwidSX3ReDrFDHZtOgxBOXXH:z66hP7dSX3RO5tTDUX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2