Extracted

• • Target

    301bf2cfba29f4a559fb4ce01d87c8d92f6984e3b55004c12c02c3bb3badf90dN.exe

  • Size

    428KB

  • MD5

    f79fda1fcd8a12cd71cf3f11fa68cda0

  • SHA1

    89cd30bf1cd2f7d92c3d7a9f02c3b49b513cb036

  • SHA256

    301bf2cfba29f4a559fb4ce01d87c8d92f6984e3b55004c12c02c3bb3badf90d

  • SHA512

    31126d3fd44c9b545b14ebb0dfa24edcb8103ee497e6141ae4faafa573841f5afccf69bf092fd3e2068d5283ed870a99f7e27fe30d414b9da3361876c3c8fde4

  • SSDEEP

    3072:j8dOsh1SZ8mnaoPav8Wz24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho19:aOsh85ba4sFj5tPNki9HZd1sFj5tw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2