Extracted

• • Target

    e8e6cd0d2de98d0c3f4ecf00cb089a5a9a82d773aad875d6308fbcad1264aa87N.exe

  • Size

    264KB

  • MD5

    9988737ed4ead574eddc15afbc582370

  • SHA1

    25f9698171a668fac60588ad926768224ee96765

  • SHA256

    e8e6cd0d2de98d0c3f4ecf00cb089a5a9a82d773aad875d6308fbcad1264aa87

  • SHA512

    862748f063affaa033d781ba06377bf07a28cec08f100aef2cf924b4a342cb6b0fb3e8896f1d1a067b422c6cf339c789c06bdb00959366d8e917789dac05bee8

  • SSDEEP

    3072:ECEgTMMX5r6oY3n24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho1mtye3+:tEgz5ro0sFj5tPNki9HZd1sFj5tw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2