Extracted

• • Target

    d3a648e0388c1a031ca0a55d5c7349e4181841edd03afd4cbe70fe5953255159N.exe

  • Size

    45KB

  • MD5

    cc4ec868a270b7e2a9de89a0ee19f8c0

  • SHA1

    89ae1d59042d6e797a0e399611ad143d622a6d7d

  • SHA256

    d3a648e0388c1a031ca0a55d5c7349e4181841edd03afd4cbe70fe5953255159

  • SHA512

    049f53a4143af2b36c8c9e450afa818b11ecf95a9824572423fe62da91629d75cf9b6eb626f3f2f9bd0b91cf45e5e64c1501ca2472fd2ea2b2f61a93b46a650b

  • SSDEEP

    768:/vSzVqpKZeWc3URtCOfYeYSPGtMQKQM+Ih/1H5q:/2V4KZG3mtCOfNtGtMQK9xbk

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2