Extracted

• • Target

    aebd5186eb40fac5dc28e3e75db62a591a092f3d9f01771a3889237292c8ee8dN.exe

  • Size

    64KB

  • MD5

    e16b7693e427861db5c02fa5b99ac5c0

  • SHA1

    9713350d3863b9b0e78196da92f168d076c47d91

  • SHA256

    aebd5186eb40fac5dc28e3e75db62a591a092f3d9f01771a3889237292c8ee8d

  • SHA512

    313290fe2440d4ceb6a914e1bd812be0b12bff15e3046284314247c85b078852788195181a639983d902c8f7728c90b897ce8d89edf42d6f3aad5371b1d62b20

  • SSDEEP

    1536:t5uPBWYymWui4v/YAIs0Zx2DYMamemmDSSXXUwXfzwV:2ZWYywiONIs0Zx2DYTmMdjPzwV

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2