Extracted

• • Target

    2cea52ee2ebe1397fa5cc32b1faa667770e184993cd5e967c53c622b1edaa014N.exe

  • Size

    800KB

  • MD5

    e4b5e566e5494ff49de0dcea46997370

  • SHA1

    1aebd21246d6a771b50810ac374a89be486b501f

  • SHA256

    2cea52ee2ebe1397fa5cc32b1faa667770e184993cd5e967c53c622b1edaa014

  • SHA512

    2bfcadc79ef3c870a404067b7425d7488d63dfd4cb7f828841f78691e5feb08c4f906fff87ae5eca5edae12c4125323a0c4100f3084db5e18433b5039b027beb

  • SSDEEP

    12288:7jzo7/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KFHTP7rXFr/+zrWAI5KFum/+zrG:7jzo7m0BmmvFimm0MTP7hm0Bmmve

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2