Extracted

• • Target

    5d3e6056e43e0991f224ae54edbfaf9984e2dd0d186ec86628fcffd1a83d7b97N.exe

  • Size

    64KB

  • MD5

    edfb204778fb0342b5edd1592295aca0

  • SHA1

    2425af30b41caa4533ba7d9361f37d5b36aacfcd

  • SHA256

    5d3e6056e43e0991f224ae54edbfaf9984e2dd0d186ec86628fcffd1a83d7b97

  • SHA512

    4b73c323a123e4795bfba5f5842cad5eb8507d092a5e2ad637d96a7a7e968769ad040d9a5b3ce68ecf9857caea95352f928bc249d1ac9d2c6e2986c000f6cdd7

  • SSDEEP

    768:5N1IIy5uktkCqaYM44dcVevu8JLUN2tj1L2Tc/1H5Ggk6XJ1IwEGp9ThfzyYsHd:PqIy8TCqRH4dwr8JL/tgeFXUwXfzwd

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2