Extracted

• • Target

    11b78e8f923e037f6150e8f73a505e4eaecf88c3deb3faae291135b9c452b7cbN.exe

  • Size

    91KB

  • MD5

    af00f297635a7721a70b154ce5f49240

  • SHA1

    4ee18c3c67f73c6ec0234a9ac972b0ea73d6e668

  • SHA256

    11b78e8f923e037f6150e8f73a505e4eaecf88c3deb3faae291135b9c452b7cb

  • SHA512

    6c761cf7f7f0505c9701fb051834cb32812265cc978a9cffeb7b98b63f4e6300b0a53349f68e396c263c962d6f171ba6f822974de797f407e862320c66490465

  • SSDEEP

    1536:++cWNDaSZ08Zln7r2IsAFRKFBR9yfwu0hetSD9ZjVCiNXR00s5fZeZQLD0:++vNDaw087n7r2CRKTyfWhetSDLVCiV5

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2