Extracted

• • Target

    8c4768743cad15a9895da97d0ee97c65bbbac07dc6f4b8ccd49a80a35b8c5ed6N.exe

  • Size

    67KB

  • MD5

    e0d9b665734247664214f10cc5583880

  • SHA1

    5ba5cedd2c2141d288700a66fa5d1e970db12f36

  • SHA256

    8c4768743cad15a9895da97d0ee97c65bbbac07dc6f4b8ccd49a80a35b8c5ed6

  • SHA512

    b67c578b298bbb7db67d7748bf106049b9b93771b52981a38cbfe271da7bd2529dcbb62f49441eb83c238af6df1f38b39d484f7e64b56cd929585f638e3ab701

  • SSDEEP

    1536:+lOhgzSgVzDX9wfIivIxEsLswppsJifTduD4oTxw:0OS2gpj6aEKNppsJibdMTxw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2