Extracted

• • Target

    3b24fd0b99b8c986f3e4a88f6f4f013539d91b610ec2f69cd7aa7f54679ba3fbN.exe

  • Size

    415KB

  • MD5

    2211bb4426061fdb793909761121cfc0

  • SHA1

    6fbe491d6a15f046d64eb36ba81ac7fc850e945b

  • SHA256

    3b24fd0b99b8c986f3e4a88f6f4f013539d91b610ec2f69cd7aa7f54679ba3fb

  • SHA512

    aad033a9a8a1d7a99779c94fb4f0346e8c78306451456daa1e09c4350e13aaecfc97ddf299a7b9e59500cd669606bb1944e28aac5c3a11e60375f0166d89b1bf

  • SSDEEP

    12288:+goWj7NtInBBBBBBBBBBBBBBBBBBBBBBBBB0kfBBBBBBBBBBBBBBBBBBBBBBBBBt:+gklp

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2