Extracted

• • Target

    5d517baf80b6790996e249f1824cae1edee4cb92ad3616245c1414c08f2da672N.exe

  • Size

    97KB

  • MD5

    5827bf313cf497c75a0a5dfc69d4b230

  • SHA1

    53e09a2875694cf55bf47458b6c35231a642d5e5

  • SHA256

    5d517baf80b6790996e249f1824cae1edee4cb92ad3616245c1414c08f2da672

  • SHA512

    67464f3bdf841676886c58b9bd07fe416045a6eb4aabe9a2cda5f90ff9a1c80c0520a4c46b228081d62e2f058c87e2ef5857cd1b4231ff8963ddcfb0ed4864dd

  • SSDEEP

    1536:XQyJC0dOEZQPuqgjaLhdRTRgASwD00zE00iFzXUwXfzwE57pvJXeYZE:XQyJ/OuQWBOhdVRgpwTRPzwm7pJXeKE

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2