Extracted

• • Target

    7a4a6b7cc5456e09de044360f805ae8a2f4371300057effe43f95b96d6bdeec3N.exe

  • Size

    512KB

  • MD5

    ec184a376dd069c86d373d8f60e8b600

  • SHA1

    a0eaaabe30f05f4c7b64240aeb0910c90683bdb1

  • SHA256

    7a4a6b7cc5456e09de044360f805ae8a2f4371300057effe43f95b96d6bdeec3

  • SHA512

    9e256f771f771d783cff01cc6b2994808df51457cb49e9746d4997f4d015cc5d3765e7c8f14ee30fdc34ca4da171bcefd9371f19321483792f2e95ff6bd7c3f5

  • SSDEEP

    6144:WLTdJLaO853XBpnTfwNPbAvjDAcXxxXfY09cnEWPDZ:wdV3QBpnchWcZ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2