Extracted

• • Target

    a5467f6585e6b03a0b56acb89fb1cc5d2c0a92497decee34d71d3d5e76e29ffdN.exe

  • Size

    64KB

  • MD5

    21a25d8bf81181b4459ec4f3bdcdea50

  • SHA1

    1abeab836e0650295ceb3bf28915fa79f242e99a

  • SHA256

    a5467f6585e6b03a0b56acb89fb1cc5d2c0a92497decee34d71d3d5e76e29ffd

  • SHA512

    1d790fdd280a1d8ea159fdd75d5de9ce9c8a849f880db9514ac8eac97d54e21fb9b5cb78026a3460c08a5116b76c3821bddc0d9c4ed1248a8ad09f99749899ca

  • SSDEEP

    768:nHew/GDhDQrvrt6DI1t5KK1pIZ+5v4gr3mC0Kfsk1E/1H5w66XJ1IwEGp9Thfzyh:n+lg6DUtF0Z+/rX0KbaaXUwXfzwv

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2