Extracted

• • Target

    a40a1a359057ecf21f49be6705b02c2cff2037a6fc787a6c88d7c16a53cf2938N.exe

  • Size

    48KB

  • MD5

    3438a8bb58ca6ab560b61c7265b11750

  • SHA1

    895109f6e3c106ff232b49bbd489c75daf58644d

  • SHA256

    a40a1a359057ecf21f49be6705b02c2cff2037a6fc787a6c88d7c16a53cf2938

  • SHA512

    451f4c3823dd5b6899b2c777437d287637ddcef19e4cf840746adac30f2b9189168b178673935c67d766f8d93ffc033a74b21b9db1515364565289bd9c332f6f

  • SSDEEP

    768:xPmkfrqO+QA3lUa9FRLHY+1npiGmjKnWKxqcBMQMNMrn1AcQ/1H5E:xJrqjftnmjpCMQMqHWG

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2