Extracted

• • Target

    b1402e61a3e6c71da590253859306f60c8c8c6750c61f2308cdbc409fa9ae691N.exe

  • Size

    45KB

  • MD5

    30cf7e48f6f17753684ce7d1c0c46ee0

  • SHA1

    7a8218957aeb061ef811dd740478042d11371f23

  • SHA256

    b1402e61a3e6c71da590253859306f60c8c8c6750c61f2308cdbc409fa9ae691

  • SHA512

    c463a0914698b25695b4e383d617ee7f7f001ae3f0a1fd16589d685ae968a87cac10226e7a9ccd89e98d4ce359d81ca047ef65bde3135e79988ca4d5bfe06d7e

  • SSDEEP

    768:GTjaJC5DmD3b8UpH4DTG6Uab6JsDsXB+f1wax0ojIj/1H5O:GTjaJC5Kjb8UpYDbUQ6CDvt+Vk

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2