Extracted

• • Target

    d6ad4a9118b42b020c0eb84e46a9bf4540e92b3abe2b839dc5e1179d511f326eN.exe

  • Size

    64KB

  • MD5

    4c2f9916333e6c07f3dc092afb8132a0

  • SHA1

    47943fe9b6e5d0de4ad428c7e45e9ff2506e2dfe

  • SHA256

    d6ad4a9118b42b020c0eb84e46a9bf4540e92b3abe2b839dc5e1179d511f326e

  • SHA512

    81bc67c7bbc57a8ecf9471d7928349d9e22934d003abebb5814523deb65c714108c704c6f45960ee9ffad1bf952e67b641e28634fdad8f881ac02922bf520bb8

  • SSDEEP

    768:hX5RT1uYkDlSGiVSwndPYjEgFtydyP7xTVgd/1H5CPfICyxlLBsLnw0ZFdGUYyy5:/RTYkDxYJNDORlLBsLnVLdGUHyNwW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2