Extracted

• • Target

    694a9befd93282a30e63fe4a15e6c4be3d6dbc63ac7b6f95c302c4c19153f4f9N.exe

  • Size

    55KB

  • MD5

    6d03c74e99e068d24a09f0fa91335910

  • SHA1

    d5e5db54a0fdf0e2f7a497abcbb48a2df065a5e9

  • SHA256

    694a9befd93282a30e63fe4a15e6c4be3d6dbc63ac7b6f95c302c4c19153f4f9

  • SHA512

    cf1b04f88004eaf42f1e857ec0b299af5ad8635b5fb91a337dacb145055384a41b45cbb544d22b3da003e6bd2452713cf69bc2ffb36092bef478888b96d7ba10

  • SSDEEP

    1536:Hvtg2kQT8xUmixtrx9yKEW5hW4NSoNSd0A3shxD6O:HvIQT8xUz3yK24NXNW0A8hhp

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2