Extracted

• • Target

    0bab5b2fd9e7bcbbd0e467075a73cc15038ae0b20d00d0ec74bfeb174bbe9449N.exe

  • Size

    45KB

  • MD5

    4d740024eae887fa52501be744ca4220

  • SHA1

    3961d310219192bd0952e48e1b8171e49c859c4c

  • SHA256

    0bab5b2fd9e7bcbbd0e467075a73cc15038ae0b20d00d0ec74bfeb174bbe9449

  • SHA512

    b75fd1665f4b32da566078930d1efda5ba78419e8001fcd4da4e6ecd56385b3af8c29ec5cfa63f4e413224c24795be38d90443623eae41ea0aa6c3ebd50e05d0

  • SSDEEP

    768:7mCyOvJWbWYz9MvWWMVj4KoaQeZZXkl23mct1fbia/1H5Jo:bBJWbWYzKWWuj4mZZXVJigk

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2