Extracted

• • Target

    1e1199fddd59303b4afd403362215ecf8fcc8032f9944834306020a87c6c4f1eN.exe

  • Size

    364KB

  • MD5

    accc016d6c4c2c4ed4e4db7c734c2690

  • SHA1

    e0af8e87e212373b4ff8d0eed9956ad6b890be6c

  • SHA256

    1e1199fddd59303b4afd403362215ecf8fcc8032f9944834306020a87c6c4f1e

  • SHA512

    c84113d0d6ab53bd7bdc2e80776c885af402f4ac5b3ca79ba429931daf3a2e865d6fec4fba6d9f738fb00e6a1af58d57497afeb78c37223969928bdf5b71394c

  • SSDEEP

    6144:2UlniHzXdX4PjsFj5tT3sFrqu+2KSnbXwBsFj5tT3sF:Ln1s15tLs93nbas15tLs

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2