Extracted

• • Target

    ddd1e86c1af5dc42b4d37184ee2dc266747b7aafd3fb60e3a48be2e592e53585N.exe

  • Size

    55KB

  • MD5

    537d993d353ed61fc537a0390e839650

  • SHA1

    34f8e43449c4e300bff927749f5f2e791de65259

  • SHA256

    ddd1e86c1af5dc42b4d37184ee2dc266747b7aafd3fb60e3a48be2e592e53585

  • SHA512

    20cab2a5f89d996363947d158b6306c025f24e0f3bf23d129db1434cf75f7b21153181b3c3cedd80f9b5cef8af647719a48f3a85d6aca4954df27b7cc621e949

  • SSDEEP

    1536:BwCWeJj9uhV/RHaDxPZM0/CaaattHTYezdsNSoNSd0A3shxD6K:BRWeB9uhbwxPTHTYezdsNXNW0A8hhT

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2