Extracted

• • Target

    20ce523604b92bb829c8dde1e1adbee954985579fdd3da098f03b0bb4cca0f86N.exe

  • Size

    800KB

  • MD5

    dba35fb7b3ca995045aacb2d59cdbb00

  • SHA1

    6df8d4fc3f2d69455530c6ef22a053e2c247d689

  • SHA256

    20ce523604b92bb829c8dde1e1adbee954985579fdd3da098f03b0bb4cca0f86

  • SHA512

    7377dc971de6c3cb8861c8356a966505b04f30ce403d37555a98144816bcf8db018d2b3551f153b78994f6036850952717bab1a9c69e4f06bddf4835de3b4fb7

  • SSDEEP

    12288:ilzDscx1/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KFHTP7rXFr/+zrWAI5KFum/Z:ilzDsMm0BmmvFimm0MTP7hm0Bmmve

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2