Extracted

• • Target

    d6f1b219e2ec70e1ac84a1bec1b9c3d05a70a51b1a9b7b9ede815c997a0c342fN.exe

  • Size

    91KB

  • MD5

    4f0061fa9fe3d5d90cfd936c960568c0

  • SHA1

    a08196adc7529bf38f1382b1738e6953c719a142

  • SHA256

    d6f1b219e2ec70e1ac84a1bec1b9c3d05a70a51b1a9b7b9ede815c997a0c342f

  • SHA512

    19940a1b94b3d19fa02651591e4031fe918c5ca5a2b73f2456f958eb326def602bbc9b9a3f469a60c362c8be8be754bb08e54f46576e4cb70e6bdeafd3bb3dd2

  • SSDEEP

    1536:ES59JsstTJ3LZlLBsLnVLdGUHyNwtN4/nLLVaBlEaaaaaadhXd45J:x59Js6lZlLBsLnVUUHyNwtN4/nEBlMdQ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2