Extracted

• • Target

    3862737928902ac6b834248cb39713bc7a563a5e2a54c230588b38267b2f6b5fN.exe

  • Size

    45KB

  • MD5

    66d92e762fccc67ba7990d324a4dbb80

  • SHA1

    dddc93b63e5e5f861589268d8bcd486dbde6a2c2

  • SHA256

    3862737928902ac6b834248cb39713bc7a563a5e2a54c230588b38267b2f6b5f

  • SHA512

    1bdd61c343e2ef9715042eaead704eb73085de0fe5391da79c4ad1cf4361ffb2c9adad970bedb61e6ece1aba8776deb6c5ccc4a10e0ebb503b63e729520efff4

  • SSDEEP

    768:Vc4QJyQPkDGTUcW2zyPy/8FUPY+BzaF8KUQU5Bda/nt9rcrrSSStiZ4oSe/1H5g:yMHDGT//zypFUtKABg/t9rcrrSSStiZu

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2