Extracted

• • Target

    3da609c7c39990e6f2c491642bcc628f6d45c71d70e3b43ff2dd5cf92748cc5eN.exe

  • Size

    91KB

  • MD5

    cec5a81104a4d35b971e2043d3a03220

  • SHA1

    17d6847ad66b54334a1ef8eaf9ad8f5dba492192

  • SHA256

    3da609c7c39990e6f2c491642bcc628f6d45c71d70e3b43ff2dd5cf92748cc5e

  • SHA512

    89bca322c79645705c860122b48d6a473b6e92bfd355eb156068d7915d5e60faddee6a76b6a308d8fd511d7bf73849bc5a4c95bf601fbf58e265d4d70ae6cec2

  • SSDEEP

    1536:JGPbb9DYcAHL1Cs3r/ulLBsLnVLdGUHyNwtN4/nLLVaBlEaaaaaadhXd45Ja:J6b9ccArUs3r/ulLBsLnVUUHyNwtN4/n

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2