Extracted

• • Target

    e64bafd41488acbc2391ea43c2e0eabe04183dfb2171841b1db0bbfee0b7efab

  • Size

    93KB

  • MD5

    8d7a343f1f68c2a99345e93cbf917785

  • SHA1

    ba14df345571a06b473a64af70a5e853bc5ace75

  • SHA256

    e64bafd41488acbc2391ea43c2e0eabe04183dfb2171841b1db0bbfee0b7efab

  • SHA512

    c47b9ed89ba9c462954c42204765ba2df0c689ed99ef2bed7704a4154adb4a3c09cd6ab72da6b233c303ae447b34e0ecc99fc2495eead227e42e0e51e1923f0e

  • SSDEEP

    1536:lDVJuzUFCOnvrf7iMSL6pGqvSgZ1DaYfMZRWuLsV+1B:l7uzOCOnvrTRSLyZgYfc0DV+1B

  Score

  10^/10

  berbewnjratbackdoordiscoverypersistencetrojan

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Njrat family

    njrat

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral10behavioral2behavioral3behavioral4behavioral5behavioral6behavioral7behavioral8behavioral9