Overview

overview

10

Static

static

10

78ccb45bd7...18.exe

windows7-x64

10

78ccb45bd7...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    78ccb45bd7267130e27d5afe998eab92_JaffaCakes118.exe

  • Size

    256KB

  • Sample

    240504-ya5yysbf99

  • MD5

    78ccb45bd7267130e27d5afe998eab92

  • SHA1

    b45b2804e73e62dbe1577e7f1c4bc1d993c8456f

  • SHA256

    dc46d1d0564c7a9f7791aa49670282ac4085c5f487bc56becf5fbfc46e66f080

  • SHA512

    cb7026ce526a086fa378a3aaf25c54da594af556711e0e3a6e15c0e2656686cafad6a612de20d819df64f271673c686109ef388b594fe217979dbc1607cdf43e

  • SSDEEP

    6144:N5MwggJf+HW7zWnsMdqkEjiPISUOgW9X+h8:N5MElOW2ZMkmZzcui

Score
10/10
berbewbackdoordroppertrojan

Malware Config

Targets

    • Target

      78ccb45bd7267130e27d5afe998eab92_JaffaCakes118.exe

    • Size

      256KB

    • MD5

      78ccb45bd7267130e27d5afe998eab92

    • SHA1

      b45b2804e73e62dbe1577e7f1c4bc1d993c8456f

    • SHA256

      dc46d1d0564c7a9f7791aa49670282ac4085c5f487bc56becf5fbfc46e66f080

    • SHA512

      cb7026ce526a086fa378a3aaf25c54da594af556711e0e3a6e15c0e2656686cafad6a612de20d819df64f271673c686109ef388b594fe217979dbc1607cdf43e

    • SSDEEP

      6144:N5MwggJf+HW7zWnsMdqkEjiPISUOgW9X+h8:N5MElOW2ZMkmZzcui

    Score
    10/10
    backdoordroppertrojan

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks