Extracted

• • Target

    d962e62ba6e4a4c4b6a8324e90e608f349abbd3e1e6df24bec4025c204d10eb5N.exe

  • Size

    318KB

  • MD5

    ead926b7115bd2883c1bfc7e1d1cb810

  • SHA1

    04466f7408d92ea3e1cd44fb897adf2bc3b78e04

  • SHA256

    d962e62ba6e4a4c4b6a8324e90e608f349abbd3e1e6df24bec4025c204d10eb5

  • SHA512

    faedde16746fe8bf026a8b77d2920d2004cfa30d166e53a6c03e1f8e21325e21c76d4cb675dcc9098b7b7a7d9b344aa8e2778e0459ff0f503d2ffe31dda0776f

  • SSDEEP

    6144:+86XRVEQHdMcm4FmowdHoS7c5cm4FmowdHoSrNF9xRVEQHd4:+pO4wFHoS04wFHoSrZx8

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2