Extracted

• • Target

    89db01fe53e7cb90fd1211d764db5ec11cac6313e26897cee4facb532ccd3afaN.exe

  • Size

    55KB

  • MD5

    77f2fbc1783ea30ec23e4c3357253e30

  • SHA1

    a6b16e0ae3899cbf79120e5daed06dec830e73ab

  • SHA256

    89db01fe53e7cb90fd1211d764db5ec11cac6313e26897cee4facb532ccd3afa

  • SHA512

    e7a62243e208f20ebfeb8d5f2172fe9d6f299d62123ba5b8bbc3016e8e5933b5401f577f59201df81cd9a12424b6a21effad8cfd2176343087b758ecad3d5f67

  • SSDEEP

    1536:eFdlHUVtUTe8AAAzWM4Vz2A4NSoNSd0A3shxD6T:8USVz/4NXNW0A8hho

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2