Extracted

• • Target

    4bdecebc80d663374a3572bc3c7b3a5aaccc77e25555294ba238974c131815e6N.exe

  • Size

    465KB

  • MD5

    a75d72cfcc695fc18b80e1dc6b992af0

  • SHA1

    72998f10cd046496e2eb80f0e0949eb4df01a107

  • SHA256

    4bdecebc80d663374a3572bc3c7b3a5aaccc77e25555294ba238974c131815e6

  • SHA512

    5ba1bf713ea3d112705286d19c3e28ae630d748d0b7dd6d46ced1fba10eddb88cd9c4955b89ca1d558eed0726b0b1d5fc89bc53610942c6365b1eb0242bd70bb

  • SSDEEP

    6144:8mhgW7qOOVF5V4lKjIbvBhRJfzSf9x7N/I7b9M:RoO8LKlUmpRe94a

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2