Extracted

• • Target

    c06e991b540d860fd811ea9b0a87d39e03a0bc9547bd54ff27b2b49472464c64N.exe

  • Size

    226KB

  • MD5

    a0d242e4d3cc1c0addece6e78c6e91b0

  • SHA1

    1ab06f492863adffd8248baed5e8bb7a718bded7

  • SHA256

    c06e991b540d860fd811ea9b0a87d39e03a0bc9547bd54ff27b2b49472464c64

  • SHA512

    0639145d79a750de18f3082b9d236b34c199190c728111a333d5c84e04a112b3c096c790a47b5da16d9bf4f34258b0152542fb2a3200311e0d98166629e2633f

  • SSDEEP

    3072:zfjvadzXoCh/43VsFhNDKcWmjRvDKcpDKcWmjRrzNtQtjDKcWmjRrzNtb:zf7aloTVwhmxEtQtsEtb

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2