Extracted

• • Target

    6cdc65b011c4d366204cde3284536164dcca48185bd91156c2088a6f3aaff7b8N.exe

  • Size

    92KB

  • MD5

    7463c774fdca023489d8939cb4e3eba0

  • SHA1

    9178570952d78f254dbf24fcb8d91cad18cd1bfe

  • SHA256

    6cdc65b011c4d366204cde3284536164dcca48185bd91156c2088a6f3aaff7b8

  • SHA512

    50a1a0d2370ef885a3bfc6de4f7e01cbd68e8f587dec58abe7db731097da9ce8109fbf541eb5cff34c843f943fef2c18e6cf7e847a9510c9b4d1d762f924fad0

  • SSDEEP

    1536:B/hsG5Soq2bgA4i95jUlO7uXcNvvm5yw/Lb0OUrrQ35wNBUyVVG:V8ZWgJiv7usluTXp6UX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2