Extracted

• • Target

    8d9c6c7050859b58e9dd22e3e40e0aa9b7117e30a4351a4187f23d05644970f8N.exe

  • Size

    395KB

  • MD5

    44ca74efddeb1a4735386f17b7797f80

  • SHA1

    bf4c37d9fd8c9bb6e1a7fd9a20f5c98b1a79cf57

  • SHA256

    8d9c6c7050859b58e9dd22e3e40e0aa9b7117e30a4351a4187f23d05644970f8

  • SHA512

    e53c310b80594cb56b71ff42767dc6d3ca2434fde3dd72b6d304729fb4a00f9735393a70a80db77fa84d63d7480397d89e4246d9227e2222d31404f803aeddcf

  • SSDEEP

    6144:CvdA+Us4y70u4HXs4yr0u490u4Ds4yvW8lM:Cv34O0dHc4i0d90dA4X

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2