Extracted

• • Target

    a898e83d4832f9a821afafa141c5ed74fec399cc9e1c8288c616584546442048N.exe

  • Size

    45KB

  • MD5

    43e1a779fe0f5a869e348c10c4f00c80

  • SHA1

    255e6b3c3f0033697f112e27e560898bdb5fc015

  • SHA256

    a898e83d4832f9a821afafa141c5ed74fec399cc9e1c8288c616584546442048

  • SHA512

    a4b1cc315c4d620850ab95284b468ecd946d54dc6c790541e5cf2079c83b0c6b1f288a147610503d61fd983abf19332c1efc76c32f2dcb31f9ea8d04de87a9e4

  • SSDEEP

    768:UvBl1FT4rraYjhzNYTmGkaTQ48tfLh26ln0TwzFcTnOHn8z/1H5d:Uvb1FTKWmzN0mfaT49wPwpG0cH

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2