Extracted

• • Target

    ecea81a9eb59456b6888fee3de15a77daf72494d03b90db4a674a573e94ef80cN.exe

  • Size

    194KB

  • MD5

    ba263471be06f0dc6bb403fefdfd9500

  • SHA1

    5531ce1e453c6e638ff29d9a106b1c7207df7b0e

  • SHA256

    ecea81a9eb59456b6888fee3de15a77daf72494d03b90db4a674a573e94ef80c

  • SHA512

    5f178cc3d5e2646f5d448140b8fe45ee3f989120d537afafd1df21de1a910306e4af3b3daba4c2cee3df2156653657c97ac3a8b820cea3bf5df4dad144a92514

  • SSDEEP

    1536:58yNlbVN4JanHgbIFEoeOaJbZatMIM/5/KEatMIGuatMIc/zT4a5GV:ZlbVN4oQJNmMIM/kEmMIGumMIc/1GV

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2