Extracted

• • Target

    4ae6f749d2da7f9ff3fec3965037f21c4911939440d7610439a72e5bc2c2e414N.exe

  • Size

    42KB

  • MD5

    e63d43e11f123b13c5afe0e38850e920

  • SHA1

    9a6884f6cf6473c082a53873b991ac7b5a7a50ad

  • SHA256

    4ae6f749d2da7f9ff3fec3965037f21c4911939440d7610439a72e5bc2c2e414

  • SHA512

    67b28b4ca28a886465fafd6cf153edb7f79537ea4aa555d9aaae756ff7fa9c382774442f5cb7018978e6e401bc9189589da90c036beb234e951ea48fc7c1ea2d

  • SSDEEP

    768:QrpEZnt7D9bWs88RKOaMXLiCMkaGNUZeKnXw5/1H5J:QUt7JSORKOakJtSZeKgzr

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2