Extracted

• • Target

    c20fca0afd26ae6830f3f31d6ac0d0115229f7f99b11fc6b046cc223756579d0N.exe

  • Size

    409KB

  • MD5

    d0189e28d4aa110057cf783029ae64d0

  • SHA1

    b7c6e3263cf391df699beb9470aec2b270310f22

  • SHA256

    c20fca0afd26ae6830f3f31d6ac0d0115229f7f99b11fc6b046cc223756579d0

  • SHA512

    47037b373020f32473d5a968228a1e5da43b2fa0938e50c7e07906a9e58b04c450b0e5521b962e3d47e37052448f974f3f478b55828af33a66f0a9d06a0cbb7a

  • SSDEEP

    6144:OsRauFZgZ0Wd/OWdPS2LStOshOWdPS2Lt:TRIF5fC55

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2