Extracted

• • Target

    c29a63e5d25513fbbc02df72b0709941d3ebc7867e4844bb04c26284ad41ce0eN.exe

  • Size

    64KB

  • MD5

    eb4c66cc1f4f1eb5377d4839b76b1310

  • SHA1

    a43a2b2c3822fea22f7b286b057a9b306e5fd2e7

  • SHA256

    c29a63e5d25513fbbc02df72b0709941d3ebc7867e4844bb04c26284ad41ce0e

  • SHA512

    6c2ea65be860c56ca300f89776c1f3952890b83c76cab0373e89df3dda3f9bcde3b4516a0a8ff6ff595180aad8b6cf8806555f91648106ea7b39b813f5401853

  • SSDEEP

    1536:hC0gCnMBzXJ9Yse/WaiZGQ6OX8UwwPnBm:hBgC4JnaqGBOXXwwfBm

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2