Extracted

• • Target

    dc252a2dd2286162da8b56f182c812bfa94d6b249b631b8c536a6e2a9850291dN.exe

  • Size

    97KB

  • MD5

    ffd4eddf1aa2dab5e508e7876cb2b2f0

  • SHA1

    1a08d197e9f134d278a59bdee3ae143678753992

  • SHA256

    dc252a2dd2286162da8b56f182c812bfa94d6b249b631b8c536a6e2a9850291d

  • SHA512

    85c18bca1f0d9becaa3c65fcd1d01e2e74271bced196ea8a3bb03c5b06d6f2584aca3a9c4695f865bae6b6930c31871938a128cd819a101553cd6bf0fd614609

  • SSDEEP

    1536:KoOIQObpE3zvYilc1LhI5yEM7O74SgCkBXUwXfzwE57pvJXeYZE:nQObe3vg9aMKzgCkVPzwm7pJXeKE

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2