Extracted

• • Target

    04b0a9b4cb2d2a02e5878e68261a08e37c634ae167df411ab9d9fa5f22880ea7N.exe

  • Size

    85KB

  • MD5

    7a2fdf664ddc300b1128db3de4bbc240

  • SHA1

    9be5f840e0ef48c6403575575eb9c038e4c8b513

  • SHA256

    04b0a9b4cb2d2a02e5878e68261a08e37c634ae167df411ab9d9fa5f22880ea7

  • SHA512

    7bb0fb49dd175b8dd89841711559c6b5f368300066c77f90ac411c7bd9b86c88ec4b46d8ff18c548c7cd917b8f549461878b820c5fed3671d1b0c6c45b67ec40

  • SSDEEP

    1536:qJmIULXMfqZMXife7CHlO7uXcNvvm5yw/Lb0OUrrQ35wNBb:qJmIUL8CZMn7B7usluTXp6b

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2