Extracted

• • Target

    415d3ddcc55e7c5c4d428eca62fc0854691cf3bf2dc6310f52593f4d1aba5a0dN.exe

  • Size

    465KB

  • MD5

    af29ced5a0c63099d6e691096bb871c0

  • SHA1

    5f18638402f17386a29dafc54e6f84f7c887705e

  • SHA256

    415d3ddcc55e7c5c4d428eca62fc0854691cf3bf2dc6310f52593f4d1aba5a0d

  • SHA512

    e94a74c5ca7f441d3f2eea10979b32f2f4fe9d61ee88981cc5ea099a49c795b358116fbf39f1ca5b2d82fff38d67b8e309ba13ce15d59fdce052e6bcd32c9125

  • SSDEEP

    6144:fCvkVbny5qOOVF5V4lKjIbvBhRJfzSf9x7N/I7b9M:6v+nNO8LKlUmpRe94a

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2