Extracted

• • Target

    897f799b16b8af32caddfd8af7ee746f808690178de43cd0947762f9e25e3bf4N.exe

  • Size

    219KB

  • MD5

    9ad69d3cc8975f46a8ad4044aa8af760

  • SHA1

    3cf385a60c6acf820a8d624155a3944b18c97e3a

  • SHA256

    897f799b16b8af32caddfd8af7ee746f808690178de43cd0947762f9e25e3bf4

  • SHA512

    aa4eb727170b7d67cbc182a4aa389848f73a3b613c8df557835a653c1fa10a0f39d530862ebf2a8a32c7fa84ff016fda7bbc2df8ca7a550015bfd596288132d9

  • SSDEEP

    6144:TRi+VbyVZ/zDOO0aDD4PCxdXXwSfYrwB:9iCbehOOdDD4PCxdXXwSfYr

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2