Extracted

• • Target

    cb23c089463ab93068d63d3e5b24f8681e40e322923bfa0cec6ac67cf1fa563aN.exe

  • Size

    409KB

  • MD5

    b9e79ff87a0471e3d032a9e87ad679a0

  • SHA1

    03db10ee1425355242655ee5ab38166b83e33a95

  • SHA256

    cb23c089463ab93068d63d3e5b24f8681e40e322923bfa0cec6ac67cf1fa563a

  • SHA512

    91d3cf505fda216b9ea6302d11cb536c322fa4e94e6bda3348d94c075825b140368786fbc4cfb6e5e5afc572929e5b8faa109feede8a9d976d3f85f70fc52093

  • SSDEEP

    3072:qrssok9Y/y8/41QUUZm8/41QrAoUZ4pWLB51jozFWLBggS2LHqlhTZNAqWBWhjoA:WoNlZgZ0Wd/OWdPS2LStOshOWdPS2Ln

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2