Extracted

• • Target

    15615683a74b059cde3c653f7dc7bee021ccf1a27374e6dad4980d7648030e05N.exe

  • Size

    352KB

  • MD5

    f95667db88c5237e188efa57539859e0

  • SHA1

    bfd4c6b2bd0a9f475cc19ac31417261e7ff6957e

  • SHA256

    15615683a74b059cde3c653f7dc7bee021ccf1a27374e6dad4980d7648030e05

  • SHA512

    09ae2430c2301ad25c98a0bc894ad86873d7e2bec80805a63499cb556d752be3d478db1504a66821846f8fb2a56a4c6815e320aa5ae2c26784227c8f1f7f8613

  • SSDEEP

    3072:Wv3mOqWTaMPKM1FjOJF4EISi/i4gG4nv4H3EzkGSaXiT+9S+a1+s3wNxn:YDqWTJP1Fg4yjwHL/T7Gsyn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2