Extracted

• • Target

    09b738a665c47c7635e3c2df2345febf379e40a70fe1da25100f4d08f762c242N.exe

  • Size

    64KB

  • MD5

    1b432a2a94cb0f5d1519fd752ef39a40

  • SHA1

    6f3e5eaca8bb6a1776e7dd8773c8cdc4359c57b5

  • SHA256

    09b738a665c47c7635e3c2df2345febf379e40a70fe1da25100f4d08f762c242

  • SHA512

    22906ab830fcf0065f4183c603b2a78b66844c972d8bd8daa1bc0df81bb2db4409ca17f0482304a0e68c4fc71e587a60e61672714827f9b0f58d750119b5975c

  • SSDEEP

    768:+ta+Nl54s+oNvR3EnUlFlCwE6zV+ul9w9vhNuPs/1H5+26XJ1IwEGp9ThfzyYsHv:Sa+2oN5cF6zH9QvK6WXUwXfzwv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2