Extracted

• • Target

    1c9f12aff0cf07773393b915ac556aac4fdb8ecd409329933fa101aaa1db056eN.exe

  • Size

    64KB

  • MD5

    5a82926a1bbc566abe5cf940b1e95820

  • SHA1

    3a8a64580bc32e787ef2258250c1c76c497bc100

  • SHA256

    1c9f12aff0cf07773393b915ac556aac4fdb8ecd409329933fa101aaa1db056e

  • SHA512

    c27b70ca8817979e849448ede79c580a8357dce66d313338ba41a0ad0bb1f476ca7936e406aa810535d3b282f9465686cc8b152a269ddddf7e198ea7d42532d3

  • SSDEEP

    1536:jVxTyFYd4z6cybrNIqG7jlLBsLnVLdGUHyNwW:jHyFY6wa7jlLBsLnVUUHyNwW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2