Extracted

• • Target

    1bbb6ed55031cd430c482cfef48ed5fc9996a3f5e4d0420eac658a459de793bdN.exe

  • Size

    344KB

  • MD5

    c0819d784e7f328e8c06dfd813edf490

  • SHA1

    e55e1dbecbde709cac5b873fff3f645d128ae56c

  • SHA256

    1bbb6ed55031cd430c482cfef48ed5fc9996a3f5e4d0420eac658a459de793bd

  • SHA512

    53261cacab4db0549b06c59150707ba9fe4d2142ca1a6d2bf0daf75eaed367cca28073bca9ccecdfa44733e1644bd9157095c1f25fd5dad3964717cfe440f060

  • SSDEEP

    6144:3oaGW5xACpX2/mnbzvdLaD6OkPgl6bmIjlQFn:4afYCpXImbzQD6OkPgl6bmIjKn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2