Extracted

• • Target

    9a9382175d22f7a02a5ed6d89a93ebf8c0eeb68d34bbb3978af05388badd7decN.exe

  • Size

    428KB

  • MD5

    668270ee3c909738e7da789671cac180

  • SHA1

    d4571855b8052728a21e52136a80b85fdaf3a4db

  • SHA256

    9a9382175d22f7a02a5ed6d89a93ebf8c0eeb68d34bbb3978af05388badd7dec

  • SHA512

    a06766bc354bc9f2e44995fc48c31f6c73afdd76c02b2402e3eae7f196782ad9827722ca14d42a01ec4994836e392b5fb68ad0ccd675ce0e88b2868c7e0417d9

  • SSDEEP

    6144:JVt5ZXZuKVp1fNrNF5ZXZ7SEJtKa4sFj5tPNki9HZd1sFj5tA:Z5hjtFrNF5h0EJtws15tPWu5Ls15tA

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2