Extracted

• • Target

    7664ad3fd03e22de0c14ada61950dd4d4421f21f93eaa64a628cb0a98ab60781N.exe

  • Size

    344KB

  • MD5

    ad4c1f6b9aade32238762f9582e12650

  • SHA1

    140382235dca9d93243d023b624463dff9480746

  • SHA256

    7664ad3fd03e22de0c14ada61950dd4d4421f21f93eaa64a628cb0a98ab60781

  • SHA512

    77fe1ca9316bf11594d3958dc3e767665e062007705c539810bf4d8b0982122bee6eb9e8fe1a39b3b6f68d9771a959fff481c3a0bad51ea4e136d1aef3c7697b

  • SSDEEP

    6144:+mnaFrOUC04CpX2/mnbzvdLaD6OkPgl6bmIjlQFn:KydCpXImbzQD6OkPgl6bmIjKn

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2