Extracted

• • Target

    fba1dc71ad2354f2945b204b9bf86a411c508198e55534b02e40e6236250e6a8N.exe

  • Size

    92KB

  • MD5

    b8e3734eb3ea588720ff3cad4bb43fc0

  • SHA1

    40ef3727c36bea4eb56d00f7548330c037a76fd2

  • SHA256

    fba1dc71ad2354f2945b204b9bf86a411c508198e55534b02e40e6236250e6a8

  • SHA512

    c0b6990aa8bae80032a65444973a5a5bf39e311e61f75a07f4158aaa85ecf8adcf3975540c32eadd3b63ff4875cb455577682a152af6a004cb4e0342f1aaa0b8

  • SSDEEP

    1536:L3KSB2Uz0uZjxXMD/2BabBQ2dG+eo1xC0GZFXUmSC2e3lO:zKSgUz02yaBabBQ24ho1mtye3lO

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2