Extracted

• • Target

    cfd034cca22b2384b0feec350d42079eb220236cf067bf60bd99d18bf4e4dd84N.exe

  • Size

    97KB

  • MD5

    f3358ee19e070f524487e94ea2d8e3d0

  • SHA1

    c30ada1cc7faee958dfe689797021e663a03650c

  • SHA256

    cfd034cca22b2384b0feec350d42079eb220236cf067bf60bd99d18bf4e4dd84

  • SHA512

    12d95a762099c9f0797a1a0db03f7885ad9d617a4c2bdc31b4929178f91d4f2c484176a8c73b69f111438b514735e5eb98e88c5343a58fcb7951f7b77a373ef6

  • SSDEEP

    1536:1MzkAjMe3jbbpIOBF27RfBVtzNM/XUwXfzwE57pvJXeYZQ:OkAgybb/Q7RfBVtqbPzwm7pJXeKQ

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2