Extracted

• • Target

    e5bb0677d2f4f8f978abda223a7427bc22260e1a068880fbaa1ee17fb1bf10f2N.exe

  • Size

    64KB

  • MD5

    af7a679207809529d2c731ee07218b50

  • SHA1

    5d838c543afae79db23e67e92e12298ff8b172a1

  • SHA256

    e5bb0677d2f4f8f978abda223a7427bc22260e1a068880fbaa1ee17fb1bf10f2

  • SHA512

    cb9270d64d390e70132378d40fbe6eba9994a90a0726e9da72f91155859e209e152fc621bbd79941fe6a2bcc394602224e50f04281741503f220f4648f25cb51

  • SSDEEP

    1536:KVk5dZZOdqnuoaLbqRoK+Dg3b4Y1YlLBsLnVLdGUHyNwW:KoZYdOusRoK+Dg3bPalLBsLnVUUHyNwW

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2