Extracted

• • Target

    f32686ea302060af7fd32e6976023b1539bc49177a9927d0c275da80400426ccN.exe

  • Size

    428KB

  • MD5

    bbed296a03bb1548a334bf73dee24ac0

  • SHA1

    068c4b1644f8f06c574ee7f01f9cb7b03498af66

  • SHA256

    f32686ea302060af7fd32e6976023b1539bc49177a9927d0c275da80400426cc

  • SHA512

    0d7c32e2917396af7dec7c23c182df4d6c4ca97bf5e0089b8806d19fb76b725d8647847888d1920d4ec3f1f90fe1266a9d4216645e7356ab6e172150ce87601d

  • SSDEEP

    3072:mLjn8gCNjZ8mnaoPav8Wz24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho/:mP8gCNj5ba4sFj5tPNki9HZd1sFj5tw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2