Extracted

• • Target

    1e4fbacb97d92fb3b001e29df579770b96a0c59b8ff31dbffb1616f9411b27faN.exe

  • Size

    64KB

  • MD5

    4f6f7f3542b209f7fe8f04ee8c6faa70

  • SHA1

    216c0f627df955fe3c42297678e763522a493bf9

  • SHA256

    1e4fbacb97d92fb3b001e29df579770b96a0c59b8ff31dbffb1616f9411b27fa

  • SHA512

    e75cedb4b315eb40e75d70b651836f532fbb4140e443ad6fd21444b07decef3652d96106ae488b6022d461bb36d4ee67447df4eb1ba85e3a73ea51f3e5d4b973

  • SSDEEP

    1536:dA66REhg3+IUfuVbHADnhLbwnYYYYYYYYYYYYYYAYYYYYYZjYYYYYYx88N3b:+NREfuZA7V8+b

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2