Extracted

• • Target

    14bf677046c47e64585f76729627c53419d7d4db31804d278c7203753fa4e99eN.exe

  • Size

    45KB

  • MD5

    90f3fd135841e935f12541d12b8a7d70

  • SHA1

    35c88c2eb5a0ea9065146e4d6a555469354b5f97

  • SHA256

    14bf677046c47e64585f76729627c53419d7d4db31804d278c7203753fa4e99e

  • SHA512

    23b53e3bf60c33692c931feb659f365232d4374706cf5f4e634eba67065f1072ee4d406230e9c4063a7f7eb77ba1c175f62f3f036d9937ff653ccd0e97b087da

  • SSDEEP

    768:blod6YG8Lv7/WQEjGkiYGUks7Mk4qGD20t/80zH5DUk1tntJTQ/1H5wC:blo28Lv7/WQOiYGUks7l432Q/8D+tWd

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2