Extracted

• • Target

    bc1bd1920b6eae1929f18a7f42a1ab0f91f2544406754238acd26e034e3de724N.exe

  • Size

    64KB

  • MD5

    499fdddd74a2ea9809693c8091bb1c90

  • SHA1

    3a9a125c7f28edb8a922a8c70671e9f53a409756

  • SHA256

    bc1bd1920b6eae1929f18a7f42a1ab0f91f2544406754238acd26e034e3de724

  • SHA512

    1e9776bdeb6740a7126f0fdb5e5d44e0bc88b759c1d8db03e428dece78364f17d030515fe1d36273ca05198314d88cb4c4e1b2469253ab31ab15ad5c470443c8

  • SSDEEP

    1536:tb4qEQr+qKb3UIrcFVzc57ubefckLOXUwXfzwl:tpn+qKb3TgFVzc57ubeEkLKPzwl

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2