Extracted

• • Target

    9f9e2a6c3b4da40f63f460d49a4f1b3c685eae5964d648fb1368bbb33406b161N.exe

  • Size

    45KB

  • MD5

    77d03c71f97d65944ecebcf174a91ee0

  • SHA1

    af7d0c8b6805b7dcd216028b3160c951d991f4fa

  • SHA256

    9f9e2a6c3b4da40f63f460d49a4f1b3c685eae5964d648fb1368bbb33406b161

  • SHA512

    1c9cf2ca3adbde5ba41057c85e23fd021612c9eee53e37023ead169fca67730e87f400e5cf824a9cb705b19f5cbd79869e1668f792b3110c750212ec230e44c8

  • SSDEEP

    768:nHew/GDhDQrvrt6DI1t5KK1pIZ+5v4gr3mC0Kfsk1E/1H5w0:n+lg6DUtF0Z+/rX0KbaD

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2