Extracted

• • Target

    1bd16840b19488506af807618bc7b8ee6ab0f4d439861dc125e13a6b0df99241N.exe

  • Size

    91KB

  • MD5

    f6b953d3dfa688402a3b8f1696ca4430

  • SHA1

    78e6eb1c7043bbd8b5944900a17031723283ad1a

  • SHA256

    1bd16840b19488506af807618bc7b8ee6ab0f4d439861dc125e13a6b0df99241

  • SHA512

    386ee1e41cc9a896e02293350d83065ca7aa2a7dd17a7743df967f884c3cee229c5607c38ef1a311ff3456d46e859e3925f235dc3b95822b997231a53540278a

  • SSDEEP

    1536:DlMpbQi9VECrdmvlLBsLnVLdGUHyNwtN4/nLLVaBlEaaaaaadhXd45J:Kpbr9VECrdIlLBsLnVUUHyNwtN4/nEB9

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2