Extracted

• • Target

    03cdef0f1f78ddd9c3914497a9fd84d1556a7bedaf8ab221f0f061b446af1bc0N.exe

  • Size

    45KB

  • MD5

    cedadb7ade9ee03fa657612acb296160

  • SHA1

    aad473ea4464ce577fd5667878e24563a30ac548

  • SHA256

    03cdef0f1f78ddd9c3914497a9fd84d1556a7bedaf8ab221f0f061b446af1bc0

  • SHA512

    a7428552f69057d702b9deb5cc579cb8072a0773134d22480b0b7c177983937e2ec1aaccd9a2cb393ac3151b0b8f5ee8686bb7347a9529501b4acae3e62ebc12

  • SSDEEP

    768:L4vElUpUmHsRx0Jgnvs2pZmbBXT9sMJx60I5MEBsFUFmW/1H51:LUE90JgnfpZmbBmR5METm8P

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2