Extracted

• • Target

    704432edd93f978435a080c124dfc2af17ec5e8538491a49c026dde1cc4fd498N.exe

  • Size

    45KB

  • MD5

    717c10315ce0681f796a0fdeea211e30

  • SHA1

    2657ba5982b1dca0c7cd423d1f941e0d3bf1a12a

  • SHA256

    704432edd93f978435a080c124dfc2af17ec5e8538491a49c026dde1cc4fd498

  • SHA512

    557c4454f8791358945167521301c92b1ee1c963788a26ba889cf443f1084ff1df99ee17c4248227013422fa4479e7a92c9974650cc194310766206e87f6f1d1

  • SSDEEP

    768:d/bzFnRxaOkGvi1INt3DMhiYZZce2tQyFAi81ZAZQZN9JMc9Yca74/1H5QF:dtH+0rOgWyl81Z4e9JnBO+Q

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2