Extracted

• • Target

    e45bb52bb9b2a14153f38894e5b4c46c54951bbca7a57d3a4231f76798e297baN.exe

  • Size

    232KB

  • MD5

    9d1e59a19b40895c90c185a5f7c8fa40

  • SHA1

    65b05b32dd11a1cfb51ff6a8b27f606b10ba246e

  • SHA256

    e45bb52bb9b2a14153f38894e5b4c46c54951bbca7a57d3a4231f76798e297ba

  • SHA512

    e014b0df7bc0309e947cb0a08f5a876ff5a8b1185e5fc2e2915b1424d2b27da65d192de3550efdad44b8dddf866e48f75793e0734b48066e272aa72cc0268446

  • SSDEEP

    3072:aljdHcXTX4V7usluTXp6UF5wzec+tZOnU1/s5HH0AU/yRvS3u121TzlbNRfzPad8:apd88V6s21L7/s50z/Wa3/PNlPX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2