Extracted

• • Target

    2485bc1d6cf9a1e7c6b047548989a16858a2763f13819a5ba7adf5e0ee95aa6cN.exe

  • Size

    264KB

  • MD5

    a338869c0d643454676215feba10dae0

  • SHA1

    d5c3c9af201a3ac6cd891f085605893e780adec9

  • SHA256

    2485bc1d6cf9a1e7c6b047548989a16858a2763f13819a5ba7adf5e0ee95aa6c

  • SHA512

    7b67809517624c16d6ffc5a04aa61dad53871f9edf341063dfbc80f221df2d7a70b6a67e51979e62424e3784dc50fa4d8130b918801dc67c5b350f14cfbcd429

  • SSDEEP

    3072:9olmxQLPVn6KP24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho1mtye3lF+:9emGpMsFj5tPNki9HZd1sFj5tw

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2