Extracted

• • Target

    eb615da565aec62cb7aee61af7fa043097544831bfeedb24ed674aadbce5b018N.exe

  • Size

    64KB

  • MD5

    fa588e09fa058674dd2dbb468739e120

  • SHA1

    285fa899126cb6c277413e16cadbcdb9a2eb33bc

  • SHA256

    eb615da565aec62cb7aee61af7fa043097544831bfeedb24ed674aadbce5b018

  • SHA512

    63cbd646d97dab4a5267b587b829b6d41d6a9a9162d451d23697159229f5fc4eb7cc59b2454ff981569ed728b97013ee9c3e593720e3484b766989db506f3b01

  • SSDEEP

    768:KHJm3Nr2/ewccYlxO1EmhmWBuUkA9C64Lxb1//1H5t6XJ1IwEGp9ThfzyYsHd:K0d29jP1v4VTzRWXUwXfzwd

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2