Extracted

• • Target

    428e414672b3367e90ff7d911dabda590210f0d81ab72538752f4c05d7321090N.exe

  • Size

    335KB

  • MD5

    815a57f69e77b75c67298a7b41dcafc0

  • SHA1

    825416bc977e607a2a12caa003be8f78bb2143f1

  • SHA256

    428e414672b3367e90ff7d911dabda590210f0d81ab72538752f4c05d7321090

  • SHA512

    f6b7e84880d7c307a0909dfefbc5e32618129ee1a3c36741f1f74f06b0be219d2c8737ff203aa1f490ac49d5bfb5bb8a6fd55b413d34a55a3727753239699b6e

  • SSDEEP

    6144:ifqlF7uthvLvwU/4qwvwU/4qvvwevwU/4q+vwk/4qD:ifye

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2