Extracted

• • Target

    003bc1c99e7921a9d8550aceae52efaae28c31cb0b48dad2b646ca3647b94b57N.exe

  • Size

    800KB

  • MD5

    87cca08b3621a45915cbd2b270501550

  • SHA1

    badd81e877775fcefa32df60dccdecaf4c1fbd98

  • SHA256

    003bc1c99e7921a9d8550aceae52efaae28c31cb0b48dad2b646ca3647b94b57

  • SHA512

    d739f88db84a89c002ae5c43f1545470b6d9745522b5be0e6a2ba925af13b41a016f6351deaa5b737cc39873ab43456dd1927438c202aa7a1d6c3fe4eda823c2

  • SSDEEP

    12288:0Tp6/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KFHTP7rXFr/+zrWAI5KFum/+zrW1:0Im0BmmvFimm0MTP7hm0BmmvK

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2