Extracted

• • Target

    3b798b6b36ee20964936b6aa450602b502ed566829936c7a58b027f038cb9d54N.exe

  • Size

    64KB

  • MD5

    b045cde174750f76ccd11a7f56e00c70

  • SHA1

    df057d70ccdf3c352ee9fda57c4ea7285d1c30f6

  • SHA256

    3b798b6b36ee20964936b6aa450602b502ed566829936c7a58b027f038cb9d54

  • SHA512

    394a418a8f70afa04da1620e9338340938376b20916586657579584d5e521c0183a57d084c0f9fa35ca87af8695a54d9f92da1384e80dbfa6b79acbc1ecf3bc5

  • SSDEEP

    1536:4AkB80NNZrr9ttekSTWdxTq4Hn8IXUwXfzwd:tkW0NNZrr9ttekS+tqw8cPzwd

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2