Extracted

• • Target

    6bbd9d9e6729b322a04b293d8042495c45e074628c21dab8846e75302aff3cd9N.exe

  • Size

    409KB

  • MD5

    b9bcfb1b6f1c08b29c13e1ddfa6f1870

  • SHA1

    9a4330d561a265fef826af68d9b94af0f0f8fcaa

  • SHA256

    6bbd9d9e6729b322a04b293d8042495c45e074628c21dab8846e75302aff3cd9

  • SHA512

    ef03a8e1b3535eba4686d2130ca10a165967288c750f84887b7783a8511d3fb9f4ecd5fc9d43f1658a03b761311e9287291fe750df1bd4c883428d7f0a9f7b77

  • SSDEEP

    6144:OEGxwKHq8bW5Z0WdRcm4FmowdHoSuNZgZ0Wd/OWdPS2LStOshOWdPS2Lt:ODs4q14wFHoS/F5fC55

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2