Extracted

• • Target

    47361a7e8e0f464f8526813bd9fc38b97dcf1987aeba85ee3be97673584c9317N.exe

  • Size

    360KB

  • MD5

    8ea2ec9200301582341a0ec9b91bb2c0

  • SHA1

    361efef7329ec0a5af502330fb2f26dace806299

  • SHA256

    47361a7e8e0f464f8526813bd9fc38b97dcf1987aeba85ee3be97673584c9317

  • SHA512

    c9132c3f9f218726695553abe87b30dbbbe0394b29b2930e710e93acdf7105a91e066d4cdc017f73ebdb0d4051c4508a41c298143af23b735d4173926b7a51cd

  • SSDEEP

    6144:CxdAUFHfCpX2/mnbzvdLaD6OkPgl6bmIjlQFxU:uWICpXImbzQD6OkPgl6bmIjKxU

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2