Extracted

• • Target

    Backdoor.Win32.Padodor.SK.MTB-0b753888d69dace50fdcae1a6f93de3b869982d854aa47a8ff4d688e971a7bbeN

  • Size

    96KB

  • MD5

    4ddb023dcb2a65b25f990dcdb0b1f1d0

  • SHA1

    653583800c914514e6e9d9ed2b5ccdb6da455d38

  • SHA256

    0b753888d69dace50fdcae1a6f93de3b869982d854aa47a8ff4d688e971a7bbe

  • SHA512

    296e6f267b583e59eb4fe5e41c28fa8d66fd872c39382cd5dba21e142ea603183d0401376b2bc892938aae6afb5a14ca1a821eeae878663bf417676a764f9c02

  • SSDEEP

    1536:daYzas4btdhMHo5hr/c5sLeyWH28CmIw1W1iA5w7RQ+nR5R45WtqV9R2R462izMR:vzv4btLoo5J/c5Qe7HdCmIw1W1iHe+nO

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2