Extracted

• • Target

    82db57aa225258bd25d3cc2e54045ce22b8ad8bf2464e48047731977762bd84aN.exe

  • Size

    64KB

  • MD5

    c97dbd3a097973652f1c84595d621b20

  • SHA1

    affe41f556e874f8b0ab43ba9dc9184108768035

  • SHA256

    82db57aa225258bd25d3cc2e54045ce22b8ad8bf2464e48047731977762bd84a

  • SHA512

    12574e06fea88117ad8010317d76164c4642c38d8b0a9b18fb3c5716b32ab722afcf82066b0df3ff9e9c2258df690d4b12ec34743f33ca11a132334183beaa56

  • SSDEEP

    768:JoJtRGcNUd3kKtqpduIQlyVU3rxvMO9v0Unp7r7W7r7r7Q7Q7Q7Knt0OeTnAK/1q:JoJ4FkKMcHVRMErnTrsXUwXfzwS

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2