Extracted

• • Target

    2480cf491613beed78f929fafb296cad3e2b31ec02e7036597aa92edb740c000N.exe

  • Size

    91KB

  • MD5

    63d92951ed3ac6ac728eec53329606a0

  • SHA1

    2fe6cce8e082f0ec1039d244ce4c46fd252d49c5

  • SHA256

    2480cf491613beed78f929fafb296cad3e2b31ec02e7036597aa92edb740c000

  • SHA512

    29756803d64abe69fafea0de5bb6ccbec31a83787fe84f36c65a32cb5903c7b6cc47f335e9d856967c1c03b4d3cc71d3dc6c13240554fefa54639ce75cd3f98f

  • SSDEEP

    1536:DDVwo7//Xc01kR9Ikd3blLBsLnVLdGUHyNwtN4/nLLVaBlEaaaaaadhXd45JO:Ko73yCkdLlLBsLnVUUHyNwtN4/nEBlMZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2