Extracted

• • Target

    e80cf3a219ec4beb86f0d7b18c7ee12ff2e6be5ff17a6cbe22533fd855de2139N.exe

  • Size

    128KB

  • MD5

    d13ccabea2d37a86a053e65986ba1de0

  • SHA1

    e28d7bec657566bb7fc61b1f3d64d0ffdfd841f4

  • SHA256

    e80cf3a219ec4beb86f0d7b18c7ee12ff2e6be5ff17a6cbe22533fd855de2139

  • SHA512

    8f9da561a36f84336a361dac84f59126e741ccb1c780d9a2a18674b8bbc4a0a34df87c8e6438cd64793f7594f5b50f06dab641e917edb6c34b756e151e2825fb

  • SSDEEP

    3072:c9hBnEdCDrFDHZtOgxBOXXwwfBoD6N3h8N5Gg:OBnEdK5tTDUZNSN57

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2