Extracted

• • Target

    84e0bbefd9f4da806aa038673bbc388f975fe32946fddca9370bc583d7d287b1N.exe

  • Size

    232KB

  • MD5

    e94a803750ab581a36912c11028b60c0

  • SHA1

    2b3501d3e3837e165ead65b29bd228437b75c78e

  • SHA256

    84e0bbefd9f4da806aa038673bbc388f975fe32946fddca9370bc583d7d287b1

  • SHA512

    8de0a76f8c8d0ba92a5448a93c5ef0a188d00a2fefe2967377f899de94d9f8288cf983313a8e3fd10d11a51ead62b03f32ad8db91ca5b4a76f9a5145c0e0be99

  • SSDEEP

    3072:bFcIUvp3DrfUDkRA7usluTXp6UF5wzec+tZOnU1/s5HH0AU/yRvS3u121TzlbNRb:RS3DrzRA6s21L7/s50z/Wa3/PNlPX

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2