Extracted

• • Target

    4d34ca5fb84869d9678d00233f5debfd098460aa5d1b856b60d26e1b7504cd5dN.exe

  • Size

    94KB

  • MD5

    22566f9b23fc6af5482bcc25ef16af50

  • SHA1

    285656a4c5af66e7997b7a0d959f6bbd2c3d7e48

  • SHA256

    4d34ca5fb84869d9678d00233f5debfd098460aa5d1b856b60d26e1b7504cd5d

  • SHA512

    46529eb2072e0bad1f6339eea83256a4f6ad25c3869db94b41af1e3ee41db718599bee809acf721be36a2adda1b4eabdd1366cb65b1224ee65c73d99b84f256f

  • SSDEEP

    1536:e4U+zbbaPfJmrtkqE9MlGsLXLQfTr9KNWPGCUM45iADxiQc4EgsIUY3zfbHDvrXQ:/zbbaXJmrPKdsbLW9zGYseW/6+ob

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2