Extracted

• • Target

    ae4d10244526c2f9164315a39a3f9e8a183d9bad89c98febcfffefc51a0e1ec6N.exe

  • Size

    101KB

  • MD5

    d0d29f4af3edd141acea715578881100

  • SHA1

    9ffc8f12b718878cb15dc9dca77b4983f141d88b

  • SHA256

    ae4d10244526c2f9164315a39a3f9e8a183d9bad89c98febcfffefc51a0e1ec6

  • SHA512

    4beba80486c6ca07eaa1b19544d43ba808035d005a78c00cd48116beef1b6f05f8d3d068c27f638c2878ca2100710ab1cbe1e4d6759158d2a2146ce1280840d8

  • SSDEEP

    3072:jQz3pldWFyduXqbyu0sY7q5AnrHY4vDX:jQ7dWFZ853Anr44vDX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2