Extracted

• • Target

    08f370b2651808fe0ff7a734ec39e01ca8e0d4bc0a580556e418f973763ce480N.exe

  • Size

    55KB

  • MD5

    9e3cc8ad5097950851c0d53ccd006e70

  • SHA1

    5bc2b58668705d46af2bc1ff66d08c18683bbb16

  • SHA256

    08f370b2651808fe0ff7a734ec39e01ca8e0d4bc0a580556e418f973763ce480

  • SHA512

    c934fa55c029454278ebab846dcf0ce2de1b8b81ef59bb0c4c48c0357209f10621a86ae7dc727f9f10454f05867d92da43900e05fa218b39a7d7bcd9a26dcb61

  • SSDEEP

    1536:Xdfw1I5BCaNXt6il9K/T+PB0jTNSoNSd0A3shxD6T:6CrZNXgilCTOuTNXNW0A8hho

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2