Extracted

• • Target

    7cffa131c8121dbbab25454c582f0be332b98284b7228317604964365605629eN.exe

  • Size

    512KB

  • MD5

    e8d2376230283c3e276d615cffe198d0

  • SHA1

    3b693f84a7e3768f3d4073b55f39c15afb62fe6f

  • SHA256

    7cffa131c8121dbbab25454c582f0be332b98284b7228317604964365605629e

  • SHA512

    5004b622e318d2958df5d6efbac6742bb235c82ec030d432582233d62356cf038b9c9eaf825df442e0bb1362803d5d8b494d7a664abcb2e21e884ea725d9e470

  • SSDEEP

    6144:tsSPH853XBpnTfwNPbAvjDAcXxxXfY09cnEWPDZ:tsSPQBpnchWcZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2