Extracted

• • Target

    0f5efb1edcbd495ef9ba44c4d2ba6478b1eb57dc6a29bf518647ffd9f0589beeN.exe

  • Size

    64KB

  • MD5

    c12cd6d88fd1ee145c8d69169c9297c0

  • SHA1

    854707c395a7b9a6679ed0b134c71218d4bacd3b

  • SHA256

    0f5efb1edcbd495ef9ba44c4d2ba6478b1eb57dc6a29bf518647ffd9f0589bee

  • SHA512

    c3ff48d08f1cb4dd8eb617850cd3efadb936ab616db9113a223fc1580502937e0a669040183c0ecb3e447af7b68876079fcff6f0427c1c9b7478634a9f15385d

  • SSDEEP

    1536:a21zbY3/rKpYFJFQUBQr6GE90DinU8TW9NlLBsLnVLdGUHyNwi:BNHpYFJ+AQWGEqinpqrlLBsLnVUUHyNl

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2