Extracted

• • Target

    d8d8364da7e7a2032cb3b73b3bf17b015ed48231e8217afcdef9ceb68cd1f6ebN.exe

  • Size

    45KB

  • MD5

    6fbc699507bdecbc5ec03a3ba8d12b60

  • SHA1

    0a0ef8f4b9e082622cfb25760e349062271860c8

  • SHA256

    d8d8364da7e7a2032cb3b73b3bf17b015ed48231e8217afcdef9ceb68cd1f6eb

  • SHA512

    a6716fdaab754ffea2bc02096ca3c9600b766988d34cae28a2fbb20f48ee284de73b6224456e48037ead196346666135eec4501a0e95f7d0d57623b7d6c6ad5f

  • SSDEEP

    768:ZZLUluTdZWC5VsJUmPFaidP4FQNVoFINoy1jMklgaoCsG/1H5g:PUQtuJUKF2FQ3mIj1HgaoCBu

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2