Extracted

• • Target

    96d0ee36a110b84817cff07170828c68030e1b1b75e790dec3916745d1ae7417N.exe

  • Size

    91KB

  • MD5

    f1f057d28d102ad597b3222da6522360

  • SHA1

    97393b2cfa84ca1a2861d016e583230f0ac11c15

  • SHA256

    96d0ee36a110b84817cff07170828c68030e1b1b75e790dec3916745d1ae7417

  • SHA512

    2c54c3a1d42a14b5272342505456532da0e97ed661ff20d1fd28882cbdb57e15dbe866eb6cc62f199b0ed7b89da74a23a62a315e97935dc4f1d5389e3cb2c1b3

  • SSDEEP

    1536:v0q4qNwWKu0vdYDNruOozpeiBIQheriC3FSr7TiwkU6joqqIVLg+:8q4qNwbuMIrUzpem54vFSr7TSUurU+

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2