Extracted

• • Target

    04dcd895038a80c50da6abba35d600d92065fc3b288bde8c07082062bf933aecN.exe

  • Size

    64KB

  • MD5

    4b88bc8fadcfd3983f175473ae0dd860

  • SHA1

    eee78fda50ab1f8453650f3afa2922b2623578ba

  • SHA256

    04dcd895038a80c50da6abba35d600d92065fc3b288bde8c07082062bf933aec

  • SHA512

    8f79390c3edf604d789b95557407cd6c4b56751f1a3621f39f6b414a86f9a1c25cc26807bd6f68a15cd2ec5aab826de5941cfbcc6bcf6737fbc0281d9fc4c8c5

  • SSDEEP

    768:hSBmQdn3SKdSXjRRnXDwm6JyCXrhDiGh/1H566XJ1IwEGp9ThfzyYsHF:sBjFlYjRJls9hDiKVXUwXfzwF

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2