Extracted

• • Target

    627b64de128eaa336be316b5bde60df69cc8a90a7c773f6d0e2138fd286908ffN.exe

  • Size

    113KB

  • MD5

    d4e7c6c0e49675e2951639b4f78a7680

  • SHA1

    8fb028c07e41aac3b506c612b6f866492a13ac33

  • SHA256

    627b64de128eaa336be316b5bde60df69cc8a90a7c773f6d0e2138fd286908ff

  • SHA512

    f20e7d0c566378c7e93c6de264b60d87bafa45846306af33a7c86f9b2fb8b57e935d4861f35e4caa3c61be1d9161494ad637fd4038260b6b6444f244997d9795

  • SSDEEP

    3072:cA2T6ueIhEip5GOuGkZFfFSebHWrH8wTW0:3ueIDp5b7otSeWrP

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2