Extracted

• • Target

    533df45f81a942c8dc2c8fd11b0f8fc37eed0d476faf414e27132a1a0e019a27N.exe

  • Size

    232KB

  • MD5

    b6f413ca78a81c19c0d03b2d94de1890

  • SHA1

    b9e8b5f91d59fd52c2b1cbde32422f0919c9216c

  • SHA256

    533df45f81a942c8dc2c8fd11b0f8fc37eed0d476faf414e27132a1a0e019a27

  • SHA512

    d75ee0631908ff8e539ee1647ddfb08ced71f645d294a56dd0c48f62093c2d613b855b319b2fa3b6e6d09a035b29a762b84ebbdb3b1673421e608c20a5f1524b

  • SSDEEP

    3072:t5NNfTKy7usluTXp6UF5wzec+tZOnU1/s5HH0AU/yRvS3u121TzlbNRfzPadOF:vNNfTKy6s21L7/s50z/Wa3/PNlPX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2