Extracted

• • Target

    c19d3b906ffa52c357dc17fbcb640d983dd5ddec7a673d1deceda41cd4601f1eN.exe

  • Size

    256KB

  • MD5

    b823dca42cf4c8bfadc208050a4e2da0

  • SHA1

    c7fc2179f63706bfb065f5a11f25ccdb91061f58

  • SHA256

    c19d3b906ffa52c357dc17fbcb640d983dd5ddec7a673d1deceda41cd4601f1e

  • SHA512

    6bf85e47bc2d596a0fed0927e7b027d87f5cfec1a77689ee0211b68c1284928d70838251137d741b823aee0b4344a742cc6b231bbd948ca42b7ede04c4399a1f

  • SSDEEP

    6144:ct666b853XBpnTfwNPbAvjDAcXxxXfY09cnEWPDZj:HQBpnchWcZj

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2