Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

c9a539ff7f...18.exe

windows7-x64

10

c9a539ff7f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9a539ff7f808afa515bf2c1834a450e_JaffaCakes118.exe

  • Size

    383KB

  • Sample

    240504-wyafvaec3z

  • MD5

    c9a539ff7f808afa515bf2c1834a450e

  • SHA1

    a84e5be1c6993b07f92f9dc584d00642791f05aa

  • SHA256

    64eabeeba82802be0d01505977f7cd79134f05b1ba50037df516074920c3ef2c

  • SHA512

    b67bbf47980d4ff3af200521979905498e2fdd94b5cbab841ab30e51c5059f5db406b50d49a7bf0c8583b244ab82496b6ef2f9ea8cb72fef96f75431f2eb6704

  • SSDEEP

    6144:1qucgNQBE8Mid2pr1ItvLxbcj8EG6p4DTkiBsGiBRh9ZnqI0ILE+gzxWRzHBVO7t:1qI8MHrCZlb9EG6aD4HGiXh91thLEXMW

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      c9a539ff7f808afa515bf2c1834a450e_JaffaCakes118.exe

    • Size

      383KB

    • MD5

      c9a539ff7f808afa515bf2c1834a450e

    • SHA1

      a84e5be1c6993b07f92f9dc584d00642791f05aa

    • SHA256

      64eabeeba82802be0d01505977f7cd79134f05b1ba50037df516074920c3ef2c

    • SHA512

      b67bbf47980d4ff3af200521979905498e2fdd94b5cbab841ab30e51c5059f5db406b50d49a7bf0c8583b244ab82496b6ef2f9ea8cb72fef96f75431f2eb6704

    • SSDEEP

      6144:1qucgNQBE8Mid2pr1ItvLxbcj8EG6p4DTkiBsGiBRh9ZnqI0ILE+gzxWRzHBVO7t:1qI8MHrCZlb9EG6aD4HGiXh91thLEXMW

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks