Extracted

• • Target

    da2b69372a53b8dd5dd7a35b76dabf7e35b899b0ab69838c43ae69770b8c2fcfN.exe

  • Size

    85KB

  • MD5

    38b41b93431d97a0a776357d387386c0

  • SHA1

    470b6fa9c9f8bc9b8f15ba44b90c0ab9fe2953f6

  • SHA256

    da2b69372a53b8dd5dd7a35b76dabf7e35b899b0ab69838c43ae69770b8c2fcf

  • SHA512

    dc850a9d8d9dfffd17c3cb140c3c9053d7cc855b104af0476e342fc1e7ba2f5d5791d76a02e7486c948c0c59e9a70b28c77c1305a5a3c5cf7fe2eb3ce55f401b

  • SSDEEP

    1536:KN3qvBmd1zPSTeZSDLK3TlO7uXcNvvm5yw/Lb0OUrrQ35wNBD:CqTeKLEc7usluTXp6D

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2