Extracted

• • Target

    404047c0d0c60aa9367006f37657d8101efd2f88e18c20214dc767678b7e42e5N.exe

  • Size

    428KB

  • MD5

    bfd02fc492e9098ff5427abf5dd2d520

  • SHA1

    357c5caa25eb0669c05e3f5f2a8ca952da28b6d2

  • SHA256

    404047c0d0c60aa9367006f37657d8101efd2f88e18c20214dc767678b7e42e5

  • SHA512

    8eaf5031c9f7a9c40c3584d9b93f3b94182863b74e587069675aee944342e44639644e964f56396112093a063f15a2956765e215bc6bbb26ba52ae5f394c5990

  • SSDEEP

    6144:whfLv+5ZXZuKVp1fNrNF5ZXZ7SEJtKa4sFj5tPNki9HZd1sFj5tQ:4fq5hjtFrNF5h0EJtws15tPWu5Ls15tQ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2