Extracted

• • Target

    35b8651e3ea989d754a9e3a2b9635a4b3c91b2de0fd3fbb189d02ab8ac1cf834N.exe

  • Size

    45KB

  • MD5

    6b7c0cc3f556569e70c81d5d92dc6570

  • SHA1

    0441b23c4ff4108e0af800196e4ee71cee7c381b

  • SHA256

    35b8651e3ea989d754a9e3a2b9635a4b3c91b2de0fd3fbb189d02ab8ac1cf834

  • SHA512

    381cf7a3942a775758e39492ac82455ebaca57e6b4dc7791fa91e4c7e28cb42a5b29838fa3e2a78e4ae64f197f652b2494eaada5b456e37e62f49cb0402bcc04

  • SSDEEP

    768:cho1kwJWGlkE7HG1J8vUDBkUVwSQnAIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIS:cGx6+5gwVxpsW+

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2