Extracted

• • Target

    e9b350c295ff39f7f254f4374f5ccf3d8d3c567740124f35501dcea86bc01fb0N.exe

  • Size

    92KB

  • MD5

    ca961556c650a6e6c2b19437bd46d950

  • SHA1

    cbac7f68a4239560cabf3c20dde1a111b9bf3656

  • SHA256

    e9b350c295ff39f7f254f4374f5ccf3d8d3c567740124f35501dcea86bc01fb0

  • SHA512

    1ec6cb12a98dfa75e596fc9d9d589d24c500568d51f58b4c2a559bd5100b49344538db85ee0b4003afa30dd2ffaa76d2e19e5dbd078a7fb6c5333625048edb82

  • SSDEEP

    1536:M5vbZhnOvIN4dGSRbV8bG5d92dG+eo1xC0GZFXUmSC2e3lO:26vk4dhxWb8924ho1mtye3lO

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2