Extracted

• • Target

    a2b7f1fc9162f55614bcc4214985fb3339fb282b81e20284165cde2ef8965053N.exe

  • Size

    45KB

  • MD5

    5261b2448d8d80474105c39727ba3390

  • SHA1

    26889ff255d9fba4712aed4ad1884ee329f36f43

  • SHA256

    a2b7f1fc9162f55614bcc4214985fb3339fb282b81e20284165cde2ef8965053

  • SHA512

    fb4008c034396b4876e597608f6202dae8ea96762d8f43cfe4a31a805d92d7794413e6892dd35342f5c42f72be010b20b3428e0ce92c3dd92202f4bd1d9231e4

  • SSDEEP

    768:L/BBv2SSXDbpq4WJ83kIHHMoyM9YvmpTPzIjBK7/1H5S:LPv2SSnpqXJ8PHHMob9Yv2TbiBiU

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2