Extracted

• • Target

    c99c8357d1e34ca8db7de02eae3708dc494d2009aef8256b0e4c7c6bfd2dcd13N.exe

  • Size

    84KB

  • MD5

    bbaf2adb070d5365ee40ed5a7497ae50

  • SHA1

    70141f85ef4b9020021a20bb3e059e6868f186a6

  • SHA256

    c99c8357d1e34ca8db7de02eae3708dc494d2009aef8256b0e4c7c6bfd2dcd13

  • SHA512

    a214b3905ab0520b3ba24fadd18824ee9370d3ffed2499ea3b89f99782ce282784ecf886481fc03ab2898ef6ef70248f1e0f1d90c8a4509df9d9b36813c24b9d

  • SSDEEP

    1536:+21zbY3/rKpYFJFQUBQr6GE90DinU8TpoaXSREXHfVPfMVwNKT1iqWUPGc4T7VLP:NNHpYFJ+AQWGEqinpFtCREXdXNKT1nto

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2