Extracted

• • Target

    0b968165b71bc1b523559339b39ec0ee3c5f5e8f364d58d445726db65f45be4eN.exe

  • Size

    163KB

  • MD5

    49a96063f718a6349b6201fa5f4df960

  • SHA1

    19e508715e4fe4b863656dd111951215b1c57b69

  • SHA256

    0b968165b71bc1b523559339b39ec0ee3c5f5e8f364d58d445726db65f45be4e

  • SHA512

    672f4407c7c9e3c26d32cd8ae723140f36b10855216aa273dc33a8f7be621abe1ecccc0cccb0ccfcf50255e2ed11e78fa3c35815cb6d9c336da11391a81a360e

  • SSDEEP

    1536:v27F5xc+F+0LppU+At4jqDu0meSylQtfeX90AtGRhKW+jujAEjh8DTL9GIvg/SyC:GF5xnFG+LqS0mcYgnWAUjWDUIwLyc4F

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2