Extracted

• • Target

    13f0f29b97fbd48fd94944984793c0cd2d57bc2f0d442720a2f3a9b20e88776bN.exe

  • Size

    97KB

  • MD5

    d07e6075f5e75b6141c89b3b85706d40

  • SHA1

    ccef462ee1c7358281f77df77e69f52839d920ff

  • SHA256

    13f0f29b97fbd48fd94944984793c0cd2d57bc2f0d442720a2f3a9b20e88776b

  • SHA512

    a81c7bf14c64cf7c190200f217928327b62173c86a6ff38c788c322554255f766b73e2b037e98ef9598aec5d4af9082b80ae36c07606fae4ffb2b31436c143f0

  • SSDEEP

    1536:/bkllu/MpyTYt0BZxdIWOfC9EOiXUwXfzwE57pvJXeYZE:KPpyTaEZnMfHOGPzwm7pJXeKE

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2