Extracted

• • Target

    10564a05f1d02c1503b78b4fb456c1b7352a5f89b8159db1b5ead77df685a0a0N.exe

  • Size

    335KB

  • MD5

    9a3fa13e741c4d8d8172eb89ef21dfb0

  • SHA1

    ffb4ffa7b7cd0052a7f071a44451cd74189bfec0

  • SHA256

    10564a05f1d02c1503b78b4fb456c1b7352a5f89b8159db1b5ead77df685a0a0

  • SHA512

    da74d7852c6aebc3ed598467c89540d181a6160411d98c9937449858c5586e29a5ffb83244b909e050e329d5d67b5b86aee22e7fe9b74df9c02ca125b31663e1

  • SSDEEP

    6144:W5yAk8b8u/GlJ8vLvwU/4qwvwU/4qvvwevwU/4q+vwk/4qz:4YTun

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2