Extracted

• • Target

    0712c813b1411d90a009f99b31518d7873ee742ff67feaff990b7294e5429906N.exe

  • Size

    224KB

  • MD5

    aac66edb964561cc54f7568b5960f510

  • SHA1

    7daa9e2d7f22a2d87b102b3b11bb778258a68d2d

  • SHA256

    0712c813b1411d90a009f99b31518d7873ee742ff67feaff990b7294e5429906

  • SHA512

    e0a8a5305de0248d3fb8ce5345c3786c00dd23864d8562e5e7e4f1d23bd1fb2a405ece0dda051a2f356492737cd598de594d6b87d19c96c74983d447b179c4be

  • SSDEEP

    3072:qO+7xMSGZU2asH1xAQqmIuYUvIMDrFDHZtOgxBOXXwwfBoD6N3h8N5G2qVUDrFDl:Kk4m4s5tTDUZNSN58VU5tTtf

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2