Extracted

• • Target

    e9d3b0dc5eaced50f8e7c15efe6cd674d604307688c2b654d628d2fce18c0756N.exe

  • Size

    64KB

  • MD5

    6de63c32a2c875d6daca69c291778b20

  • SHA1

    9740b88fef1f1cbb4c8ec1bd9fa89be29f42f3e5

  • SHA256

    e9d3b0dc5eaced50f8e7c15efe6cd674d604307688c2b654d628d2fce18c0756

  • SHA512

    67e21b1c40f55f566b97943b34183219b3a65cfd55a88945910b404608a7892d3ddc0f7a50da4bc500c0c68553f69ab96d86788392d69078d3e7973552e4e98e

  • SSDEEP

    768:Fbd9lTR/0g6drcWM4mwuV24a6Efb7kpPoPHvXUn2+3GKav/1H5+6XJ1IwEGp9Th2:x/z/HGwWLoi6cbDXUn2+3GtXUwXfzwH

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2