Extracted

• • Target

    5c11fde539c82bee2d5519d7df40a8adeef1be0e3c6be5f8aaf49857ea2291e4N.exe

  • Size

    194KB

  • MD5

    ffab0a4229436c03d3c0e1e4218b4950

  • SHA1

    f25c020306e8091903c1b236c804ff3475ddf0ec

  • SHA256

    5c11fde539c82bee2d5519d7df40a8adeef1be0e3c6be5f8aaf49857ea2291e4

  • SHA512

    1cd1693e588990a4994e55e48103dd65b15a21adc74b47a6a3d3062f382df7eb9b98571c3f3725c4420105c5679c910a7e2bde99eb558a32eca203663e822dac

  • SSDEEP

    6144:OiQayCHW3VIRV5OdSfUNRbCeKpNYxWlJ7mkD6pNY:OiQGHsU

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2