Extracted

• • Target

    ee9b1b4a4e906ad4dca09999269598b5bc74199d8d8811dbcd697c0aa41fbee0N.exe

  • Size

    92KB

  • MD5

    c704ef2b929b2d53ed77451b6b50e320

  • SHA1

    66f453b0c9ed3aa877eff1309dd415f32f1e7776

  • SHA256

    ee9b1b4a4e906ad4dca09999269598b5bc74199d8d8811dbcd697c0aa41fbee0

  • SHA512

    979fb87275078c5787aae39c3eb473520b86a69a05cf202ca925a802a6a797e3a95e81dea9d5414f8dc70415a212166e4309e24d0557fdfd494dcb1d2b4ae390

  • SSDEEP

    1536:sYzU7b0d+AM1qHE0ysW4AQ1zlO7uXcNvvm5yw/Lb0OUrrQ35wNBUyVVi:TU7b0dGqHQP4B187usluTXp6Ul

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2