Extracted

• • Target

    11f25974a629dc53c023ce07330959599f2e394b0f5692ef38717c86b81ae9c5N.exe

  • Size

    64KB

  • MD5

    97c5bacb5b5dedefc59db224bc2562e0

  • SHA1

    72ef99e666f39537660b3401544044a6a24f9fe4

  • SHA256

    11f25974a629dc53c023ce07330959599f2e394b0f5692ef38717c86b81ae9c5

  • SHA512

    85008a97a8a13b688b7a72349f8d33deba68799ebbbc2bf900d9ecd7adfa875f21c6562ab5d60d624d388d94524706d814060780c369a78668d7cf5d55d57819

  • SSDEEP

    1536:olKeWMMhOSC8mjSNesFRtBlxNE9JFRt51BdplxNZVh9JFRt51BdplxNZVh9JFRtu:oYeLMt9mjSkFef1lLBsLnVUUHyNwi

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2