Extracted

• • Target

    cb13de2caaa0c4eedde741c826d876b68921ab4bd8081823f64c8abab06b44f7N.exe

  • Size

    512KB

  • MD5

    26291d06d9aa3cb10e33eb4d47278f70

  • SHA1

    14d0edf566c206d49427ab0aedb0cd8452318d6e

  • SHA256

    cb13de2caaa0c4eedde741c826d876b68921ab4bd8081823f64c8abab06b44f7

  • SHA512

    d87ffc53a2522455aeb37d03e81310d95ab7bee1cdff3284fd2e22fc1c8309111f154235528770d6c7381327b663b27a8ab2cb731e950be828cac5890cd007c4

  • SSDEEP

    6144:ovdA+HUZP8VU5tTO/ENURQPTlyl48pArv8kEVS1aHr:ovGUG5t1sI5yl48pArv8o4L

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2