Extracted

• • Target

    7846bb3772a4ba4814d25b1ae0beb72f863db492bc1a8c35dc1d836458664ca9N.exe

  • Size

    232KB

  • MD5

    f3c270b39f17e3d49f020cd3e9085470

  • SHA1

    cfca57452c04886e97ee4f655bd25c9a391c1ce7

  • SHA256

    7846bb3772a4ba4814d25b1ae0beb72f863db492bc1a8c35dc1d836458664ca9

  • SHA512

    341be014d5e2b5562e3cf63b59ac58b19ca4f7a62add187a63e6a735c684a599da98b18e9e4e6405c7e2b450846b66c7f9c26fa76336da43c0f6480c31009361

  • SSDEEP

    3072:R7Dq6ELLpQK/7usluTXp6UF5wzec+tZOnU1/s5HH0AU/yRvS3u121TzlbNRfzPa+:9D7ECK/6s21L7/s50z/Wa3/PNlPX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2