Extracted

• • Target

    75d3cffe6d2a7eb7bd3472569d880a256f733338181e3c743e34de52c26aae96N.exe

  • Size

    55KB

  • MD5

    4a09b22caed8888316492303423f04f0

  • SHA1

    732cae74ead24045cb2a783225f2dd327a0fa5ad

  • SHA256

    75d3cffe6d2a7eb7bd3472569d880a256f733338181e3c743e34de52c26aae96

  • SHA512

    35ebee50b32d76b76748312781963534ef59b6ee7758ec25b3000d742a6d7b6e20ccc50b87f18b806159acb5756159f309ec695af707f38c168bd3ccd4dbe0ef

  • SSDEEP

    1536:1t5c5DwBVUrTGvymUoUh1NSoNSd0A3shxD6q:1dBVE1eUh1NXNW0A8hht

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2