Extracted

• • Target

    dbe7331571f0a1b6752ce30da702c1f33bd6e760b1c3f3ebc2ad7e6293d4c0ddN.exe

  • Size

    88KB

  • MD5

    19e241e3a4b4033c2d4ed517fcf211f0

  • SHA1

    3ad2b7c8be42c80dd5dc9bd3ffa0e655032c22ff

  • SHA256

    dbe7331571f0a1b6752ce30da702c1f33bd6e760b1c3f3ebc2ad7e6293d4c0dd

  • SHA512

    4b7b12a00a336523d775a096d91035265b96b9bf2f85479848f9132b682803aa011010730a61e43815268b38832ea0a26d783120d3930901146f93a7647259d1

  • SSDEEP

    1536:7N0+51lyHgOnSLyrVTa0o9QaEKsAHQjLh7R5cRd/aOPuSnnouy8b:7N0+51oAOS+ta0LdKs9jV7R5crPugou1

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2