Extracted

• • Target

    f1f97863716ebbbae5e89cf9392a44862452b28cfdd4b851f07034c8d6595bf6N.exe

  • Size

    318KB

  • MD5

    cfc2073aeb14eec902db2c83cabd06b0

  • SHA1

    41366b778d6f3fe9cacddc9b8105c08945c6504e

  • SHA256

    f1f97863716ebbbae5e89cf9392a44862452b28cfdd4b851f07034c8d6595bf6

  • SHA512

    6548a9a5a9f1f536921df811fcfef78e9230fc37f0b10a354aa57955cd99db1b0115bfe288c74240312602b845004f9e849c1485a1536e6c015726157b618359

  • SSDEEP

    6144:iiQayCHW3VIRV5qRVEQHdMcm4FmowdHoS7c5cm4FmowdHoSrNF9xRVEQHd4:iiQGHsUcO4wFHoS04wFHoSrZx8

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2