Extracted

• • Target

    ca62e08a8023fe8ecec2c1fd00200680dcf5fc36ce47a8fd3b5c0a6fb6e49aa3N.exe

  • Size

    64KB

  • MD5

    dc9890adc9c669c955483981267b28a0

  • SHA1

    ab305baf5e027d72be9f22340dc36eb61065502c

  • SHA256

    ca62e08a8023fe8ecec2c1fd00200680dcf5fc36ce47a8fd3b5c0a6fb6e49aa3

  • SHA512

    1d4f086765af7177de4722dbf7d1208edd2bfde2eba32e6c2adf09c374c9c514c650453490b416b271ca9d48c4a56cb89399dbea3914b97c359aa19777c12c3f

  • SSDEEP

    1536:RAVXtSP6+X7SI8DXvyh/rPlOW+bErzXUwXfzwS:eVXtSPOI8DqdEC3PzwS

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2