Extracted

• • Target

    9cf97e8392685c7c1cc3062e8852c2b8e397956734e7d47ab9fcd3127236fe94N.exe

  • Size

    89KB

  • MD5

    3eeb81ad14d0a0b79deeebd0228137a0

  • SHA1

    ea3dea2bf5e3eeab43a7f7bc234b6142e3eb53b1

  • SHA256

    9cf97e8392685c7c1cc3062e8852c2b8e397956734e7d47ab9fcd3127236fe94

  • SHA512

    bf19734417a03b59d9a9ed6b0ebb2ed1cea91fd606d8c72ad8695ddff00f8ef6ddae450cefa8332920bf4843457727c4c707645bcd8bb5c18c8c2ad099057983

  • SSDEEP

    1536:G8nH7YVD/9Qv5W4bgg2bd+T9H85Pd2ADOWbOrU5hNwTRGeFAAyTQbbLsQtcFLLgA:JbqMIbHVODaYbLyLsJQQa+2J

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2