Extracted

• • Target

    8e29d2f03672e09d63081e037262995424305ce4688beb60c0db53d25ec29bb6N.exe

  • Size

    85KB

  • MD5

    895a62f9deb67e77afa56e70c6c78640

  • SHA1

    3a754c5aecc4ac1e1220b106620fa1d46bb3283d

  • SHA256

    8e29d2f03672e09d63081e037262995424305ce4688beb60c0db53d25ec29bb6

  • SHA512

    721159e8c257d7359d672fb0f044a98c1fc6c0e0360d9c685337a803528475b0941c6357942ca87d6a14958dcb2ee82406af2ae931a7bcff9ee2b3b2994b527a

  • SSDEEP

    1536:YkFQETSVdnNr1Zca0PkZFEGWOsT8l4110zlO7uXcNvvm5yw/Lb0OUrrQ35wNBb:aVMLHn1087usluTXp6b

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2