Extracted

• • Target

    009a0047ccf74772b100abc7a3b553018730b2c5333c0f17ad9a20a4213a3afeN.exe

  • Size

    428KB

  • MD5

    9790c35faea2a9af0aec2f38c8ac3b80

  • SHA1

    bece1b18e4f0bae09e8c29602b46db1cf10f60e8

  • SHA256

    009a0047ccf74772b100abc7a3b553018730b2c5333c0f17ad9a20a4213a3afe

  • SHA512

    174de789fe11f1e0d9a82c29e77e093faf1489d6b8bdf90fe71dd6ad02ea6a85db08c9966363235a7065090169a5995f065defc7ea5090a45b02d932b0c0927f

  • SSDEEP

    6144:awHRkLPJi5ZXZuKVp1fNrNF5ZXZ7SEJtKa4sFj5tPNki9HZd1sFj5tA:ZM05hjtFrNF5h0EJtws15tPWu5Ls15tA

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2