Extracted

• • Target

    f76688af47d6cb29c4accae99cc3c907af1cff26354d8e2dc2c0f138c21225a8N.exe

  • Size

    232KB

  • MD5

    79e4ce440d593460b65e51bc49f9a270

  • SHA1

    5a674a93acedbbfb489a527613065295f0b199c7

  • SHA256

    f76688af47d6cb29c4accae99cc3c907af1cff26354d8e2dc2c0f138c21225a8

  • SHA512

    efdbf7034f57ff06f4c422813744cdb02427c3c621a76662f2b3cd43ef9b2b3feb1580777d480ae81a09e8a3462f9dd5be91c97325ddb710f7e724369593b4cb

  • SSDEEP

    3072:NOTKPyOqe7usluTXp6UF5wzec+tZOnU1/s5HH0AU/yRvS3u121TzlbNRfzPadOF:NOTKPybe6s21L7/s50z/Wa3/PNlPX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2