Extracted

• • Target

    e62477e0fcb11efa735bfbf745b13bf1e98880e48bd6ea3c650bfe9e6f84c540N.exe

  • Size

    264KB

  • MD5

    c7812df33d9d31a8d9cb9a74778389f0

  • SHA1

    1dcbf57838fdcf758f83b5e50e1290907d9f37d9

  • SHA256

    e62477e0fcb11efa735bfbf745b13bf1e98880e48bd6ea3c650bfe9e6f84c540

  • SHA512

    a30d4eb5b16fcd0b2ff64fcc165bc1628ce2dce37587d8b7cb863d67a547719dcd8a8809f27869216225b41b00e00673deb2530c07744212236c75eaf2a356c9

  • SSDEEP

    3072:XBe+bbnqqO+r24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho1mtye3lFD6:XYsLqqO+gsFj5tPNki9HZd1sFj5tw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2