Extracted

• • Target

    ea13b5adc354514ec21365fd77b1f52fcfc80312f1425e24b04eb66758ae62ccN.exe

  • Size

    194KB

  • MD5

    f8fd3568df884f1136c2ca262bfc26a0

  • SHA1

    e8d3cc1648b1ddf7ffde73e1d5e0b28181f9a55f

  • SHA256

    ea13b5adc354514ec21365fd77b1f52fcfc80312f1425e24b04eb66758ae62cc

  • SHA512

    c5c03e03a9f96f1a738d4f5fdd29639182ec019447db161f5444528dc3f29fedb0361acf9863de58773853b84f1a27aa47a431c456eb5f55b6d74d9dd3bcefc8

  • SSDEEP

    3072:5VlRcxAjCGwP+mMIM/kEmMIGumMIc/1G3:7fqoCJ+5/pbuh/U3

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2