Extracted

• • Target

    ac3d4706446e106af71c4a04dd0362c24ed4212e812b790213e8c9a892559c60N.exe

  • Size

    428KB

  • MD5

    9a9bdd63f493daedc1270acd116478d0

  • SHA1

    659395fae082cbf01ce23fa861a9b2ba9f8ebb4e

  • SHA256

    ac3d4706446e106af71c4a04dd0362c24ed4212e812b790213e8c9a892559c60

  • SHA512

    9647f953f21e049c4d61af4028664c87f13e2b1ac8fc1224701bff0125e1927cb821f5e4591a2054f6c69887cd5c4505d2b4c00f0ffb8741603b03a9b9459df6

  • SSDEEP

    6144:BgzbwbX5ZXZuKVp1fNrNF5ZXZ7SEJtKa4sFj5tPNki9HZd1sFj5tg:Bg85hjtFrNF5h0EJtws15tPWu5Ls15tg

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2