Extracted

• • Target

    d4196929bb4546cb0e0407a2b4e1a060a24d71bd13af308057fc962ccd52b662N.exe

  • Size

    64KB

  • MD5

    9d253d9395bda02a513b6dd884ecf9b0

  • SHA1

    71b9e25c4077ac5ee734138e35e082837e9316ee

  • SHA256

    d4196929bb4546cb0e0407a2b4e1a060a24d71bd13af308057fc962ccd52b662

  • SHA512

    6db1f2bd69a8d8a96b52a0242843d1de24f37a814fd428de7a2de6bf0413d2784147587cdc98e20bd46132f69ff4ff2ed3ad7d59800a4594fbba06a80e8eae65

  • SSDEEP

    768:kSw45sIWaWzA5vGEVFtXmq5iEnErethGeucj8lh/1H5MsI6XJ1IwEGp9ThfzyYs1:kSHalrAQonXmq5LnEmCS4XUwXfzwV

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2