Extracted

• • Target

    e8f1411f78081788e26c33c236a44220a179e3f731c1d30c83b797b03a2101eaN.exe

  • Size

    97KB

  • MD5

    7e6fdd3bf333b0f6d46504d82f4ecd10

  • SHA1

    3e27a3588b3a2e0c77a164a6d6aa1e1f21bf11b7

  • SHA256

    e8f1411f78081788e26c33c236a44220a179e3f731c1d30c83b797b03a2101ea

  • SHA512

    6ef3e6bd4677d77b60aeca673f31bf98beb96946c556059e0d985a60d1585862dc8de9bb218be3925ce03e0cb69ad7de420f1f4d455510b61ed88009ea5cbb8d

  • SSDEEP

    1536:tzZUH3IcKwYBQWYfR25Bp7uSOxhMXUwXfzwE57pvJXeYZE:F6H3IcK7hvE4Pzwm7pJXeKE

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2