Overview

overview

10

Static

static

10

11ad32b567...18.exe

windows7-x64

10

11ad32b567...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11ad32b567c0dc777efba5bc39ae0a7c_JaffaCakes118.exe

  • Size

    844KB

  • Sample

    240504-xkwbtsfd71

  • MD5

    11ad32b567c0dc777efba5bc39ae0a7c

  • SHA1

    493a7f156a3b293062256e5f90099b8010935923

  • SHA256

    ef6b223ca15d85f63736d9cb5a10507d4c2d8799f2902b28fe160bd1df1b7f36

  • SHA512

    345dc2654e27ab53731891d75fc5e9917597695c993c8df40e9cde5d3a09b74dac1e0ef1220af8187ff53a47ee8c119912b9a76327822e911ca4d0608254be17

  • SSDEEP

    24576:lRaH5W3TnbQihMpQnqrdX72LbY6x46uR/qYglMi:lcH5W3TbQihw+cdX2x46uhqllMi

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      11ad32b567c0dc777efba5bc39ae0a7c_JaffaCakes118.exe

    • Size

      844KB

    • MD5

      11ad32b567c0dc777efba5bc39ae0a7c

    • SHA1

      493a7f156a3b293062256e5f90099b8010935923

    • SHA256

      ef6b223ca15d85f63736d9cb5a10507d4c2d8799f2902b28fe160bd1df1b7f36

    • SHA512

      345dc2654e27ab53731891d75fc5e9917597695c993c8df40e9cde5d3a09b74dac1e0ef1220af8187ff53a47ee8c119912b9a76327822e911ca4d0608254be17

    • SSDEEP

      24576:lRaH5W3TnbQihMpQnqrdX72LbY6x46uR/qYglMi:lcH5W3TbQihw+cdX2x46uhqllMi

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks