Extracted

• • Target

    2cb7d5f708e59bb036fde501fda8b2b4e762a794fcd6df99f304fd0212d814a8N.exe

  • Size

    194KB

  • MD5

    d07c6f609a29c1cf8c69bf04abefef70

  • SHA1

    0ba26dbdac2a99259e00cc6fc8d32525b847cbe1

  • SHA256

    2cb7d5f708e59bb036fde501fda8b2b4e762a794fcd6df99f304fd0212d814a8

  • SHA512

    52ad9e8125b978a882259e9c9315eaed83294cc9dc951bd811ee5a146efbe0f2467fb0aa22fd519ed946fd46f10934aae17a8ee38ab05121d25ecc60d024280e

  • SSDEEP

    3072:ChE6QrvFxhg6M5X6kmMIM/kEmMIGumMIc/1G3:IQrvJk5/pbuh/U3

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2