Extracted

• • Target

    6473a524500de3cb17ed1251a6815983b7fa2daa241a7ba748f9b8fe05328be0N.exe

  • Size

    55KB

  • MD5

    6db8ce78905e472863a63d08d37c6fc0

  • SHA1

    17f30e73b000fd8da51a2b0998a415c62c591635

  • SHA256

    6473a524500de3cb17ed1251a6815983b7fa2daa241a7ba748f9b8fe05328be0

  • SHA512

    6ea2788cadb9b162ac32c3437e67232641db3a854535dfe4db9d8688fa3aa7cb4b9f761a732488f96b80aac161ea08524af9153f0e1c2e69c65b1d5e8aca8c58

  • SSDEEP

    1536:r1/JQhPrUTKnUdKivIcWBkgE6+g/0NSoNSd0A3shxD6q:B/yrUTK4PWBkgE4/0NXNW0A8hht

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2