Extracted

• • Target

    65edb94e22d1cfda8553b83efebb824d02a94f56de55b5f65cee0871d29a0dceN.exe

  • Size

    379KB

  • MD5

    c9a1c9d85d0f8339757a5412b008ae30

  • SHA1

    42dc14d2bc66b98ebf1f3a4da459e0f69dc68cd1

  • SHA256

    65edb94e22d1cfda8553b83efebb824d02a94f56de55b5f65cee0871d29a0dce

  • SHA512

    60301bdb53602ab887a6966683c74090c2d7aad46f7ba0ce4aff0458dacbe03cbb8009d9cbb270ec3ccd358a5090e82546f385e7668c1f9a5f75859f0deae7d9

  • SSDEEP

    6144:ZvXXgli7O/0xLxli7O//yb1c3ccU0S6GyTgfiEkrc:Vo6vxr6lGHaXyTg6Ekrc

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2