Extracted

• • Target

    299dc95d0d795d833602d7cf54be2ec0ca8614102cf8c19a19c4f1f0444846f3N.exe

  • Size

    800KB

  • MD5

    e281318f98aae67f3df975c25d165ed0

  • SHA1

    718f74d2599b1b5af6e74d138a66325e0b0a5354

  • SHA256

    299dc95d0d795d833602d7cf54be2ec0ca8614102cf8c19a19c4f1f0444846f3

  • SHA512

    1612bedc5d8a70061aaca43ee30d3b914c1d9c0829e9eebfaa4f20b4870062d2ab7645f3386b57e0d89902d30f958649d7ccf399a5729a01d18207e7b92ef15d

  • SSDEEP

    12288:FMDI/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KFHTP7rXFr/+zrWAI5KFum/+zrW1:6km0BmmvFimm0MTP7hm0BmmvK

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2