Extracted

• • Target

    a37123414ead595e5c77b295971eea0334b9019469a016c1c9a69c53914ab88bN.exe

  • Size

    226KB

  • MD5

    c6acb9885e7340550640d0fecb1168b0

  • SHA1

    728be42bbe665b71909e92b75dfd21e6a12f015f

  • SHA256

    a37123414ead595e5c77b295971eea0334b9019469a016c1c9a69c53914ab88b

  • SHA512

    072bcc124ad57de05aa528c37db5baec49865fee5998da3ed6e9b142ce0f3c4dcbeb14183d0feb29c122b974d35d1749caa7df90d286117b1dcd977bb2587280

  • SSDEEP

    3072:Trx0QQosjX/qm7DzP2DKcWmjRvDKcpDKcWmjRrzNtQtjDKcWmjRrzNtb:TrxjGxDrXxEtQtsEtb

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2