Extracted

• • Target

    96f23a26abdd118b3af12ac8707881d1f3a154efd7cd062afab073d03e7a7375N.exe

  • Size

    352KB

  • MD5

    de1c5d3383116dbf1d6b826b8c0d1dc0

  • SHA1

    811cd59f481e7c345e2dd0705dc7aee68cd45409

  • SHA256

    96f23a26abdd118b3af12ac8707881d1f3a154efd7cd062afab073d03e7a7375

  • SHA512

    0bc67f577f109cbca4cea47a5e98f7cd82fe0fed342d9f02db26e31d4244b11b32633338f42acec927970b3b9c3ae49d2fdf25006ecfcaf943d89d580737d9f0

  • SSDEEP

    3072:/tzcsb3RDTz93bOJF4EISi/i4gG4nv4H3EzkGSaXiT+9S+a1+s3wNxn:qWD5o4yjwHL/T7Gsyn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2