Extracted

• • Target

    e353ec63fb5f7d25591cac04e0ba9af0dbf62e8dd92d511281ccc6f8ce8e56abN.exe

  • Size

    45KB

  • MD5

    dfb3cf3cdfc078407048359d91e87b60

  • SHA1

    8b818f557814ec12faeaa4a3db821960a6ac58d3

  • SHA256

    e353ec63fb5f7d25591cac04e0ba9af0dbf62e8dd92d511281ccc6f8ce8e56ab

  • SHA512

    ec7fab8962b32457c1b3119aa92087e465d11713b8eb0f43880ea67f3b21ef6395b74c2294100f7f70c8b7eef34d8e250b109d1e66a40b9a3c300293a4aca874

  • SSDEEP

    768:HtIOaomi7wgJGo0CbFrjIYnIXaSLks1d7faS8r/1H5Gu:HtIGmjgJvXFrjIYnIKSLh7bI8u

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2