Extracted

• • Target

    85a5a630a173c3d6f007ce11c20a681b90cc1c13a697e2d21ef0076bcfccec12N.exe

  • Size

    55KB

  • MD5

    b186a5f554c87e64e6395ca84119d7b0

  • SHA1

    fc85d47489ebf9778d6dc5d074eca02223197cb8

  • SHA256

    85a5a630a173c3d6f007ce11c20a681b90cc1c13a697e2d21ef0076bcfccec12

  • SHA512

    a738c9233c76f5df825d99bb18c2534466b5de2e09e969752a4a0c87e4692f7123a47c6df6d5f3a490d7a90f5f7142f8ab1137939782b23df3e5e258f6381f19

  • SSDEEP

    1536:e4CaNpnc031u1dIuAmphjjs+NSoNSd0A3shxD6T:Tlu1dzprjjs+NXNW0A8hho

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2