Extracted

• • Target

    5b801af9b901ec490d4f756518f16d97f36e665381737247bd6ed03d6f4e5555N.exe

  • Size

    64KB

  • MD5

    4ee8658b4f3d26643290e305e9cb9b70

  • SHA1

    b4315f675c83c2042fab51a739913936e0dc43f6

  • SHA256

    5b801af9b901ec490d4f756518f16d97f36e665381737247bd6ed03d6f4e5555

  • SHA512

    33cc95557f10170eb13fb953dea146a0f92a2188883cddb9fb46ae1fddb07452a66743b7db55f947a7a1ded241a713ed6f53121bfd5c5e1c5840229862be321b

  • SSDEEP

    1536:ArZYgDveQAUYgHRizcbhcZ2JQ/5LbwnYYYYYYYYYYYYYYAYYYYYYZjYYYYYYx883:ev7jHY0mcbo2J+N8+R

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2