Extracted

• • Target

    770d41142484a7b009faabe134bb5b4fc76d89600916470ae2b3c43e6f332974N.exe

  • Size

    264KB

  • MD5

    7b02f43dd82d6e1ba5adc8de7559df60

  • SHA1

    f4e328d40a320e4e7b9c0b62c4eb48ababbaaa62

  • SHA256

    770d41142484a7b009faabe134bb5b4fc76d89600916470ae2b3c43e6f332974

  • SHA512

    dfd1faa7e888fa90a64a8ae2006b0ee12ba306b6dee88bd84dec729fd98448b3dc7b78ad0b4fb758670894682f68d56e0bfabb48fb806b35c902574568ae2d0a

  • SSDEEP

    3072:k/hgzkwltzKL24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho1mtye3lFD6:CgNrzKAsFj5tPNki9HZd1sFj5tw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2