Extracted

• • Target

    2eacf04e420395f8580a68caf5b84b655cd5f7664fac3de8fb3624350a1508ddN.exe

  • Size

    91KB

  • MD5

    e943f61f653c5b699524b47a25d37b50

  • SHA1

    c75bcddf0f57905f7cbe22bad156aefa4cde2acc

  • SHA256

    2eacf04e420395f8580a68caf5b84b655cd5f7664fac3de8fb3624350a1508dd

  • SHA512

    9bc0632ca1c9b967f7a977264a51521c4b76b7f2be486d899836f07ad8f8cb6a5d00d31a182cbca047f1666580122154b8f0d4e3c82177f9cf62b4292020e7a8

  • SSDEEP

    1536:79ukqNxY0zbHXFY77Q28clLBsLnVLdGUHyNwtN4/nLLVaBlEaaaaaadhXd45Je:79VqNxY0zLXGnuclLBsLnVUUHyNwtN4t

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2