Overview

overview

10

Static

static

10

a69f42d00f...18.exe

windows7-x64

10

a69f42d00f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a69f42d00f22e98a52272ce8f3d26828_JaffaCakes118.exe

  • Size

    192KB

  • Sample

    240504-yhp8gaca96

  • MD5

    a69f42d00f22e98a52272ce8f3d26828

  • SHA1

    caf1b88788d6e9b6ee1b00e32bad275e47f24e36

  • SHA256

    e4754a850e88395056493d13b8af02a47b8998abfe1aa1b1fb46cc6cea85ccea

  • SHA512

    438b6b74dd687758c9d356ce5f5b0c32212dd4354f61be2eed557146a724e3f6d6bac1d11e99ba1e8c158256bba32606522b635131a3a20fc9a5c11fc555846b

  • SSDEEP

    3072:dmzPhtX/mMCra0YNclZlIfceHdeRr2qOQpq3HNr5GnV54c4NthaeKU3d5vEiLqsx:ahJ/rgUfiRCqO+uNk54t3haeTFLel6ZX

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      a69f42d00f22e98a52272ce8f3d26828_JaffaCakes118.exe

    • Size

      192KB

    • MD5

      a69f42d00f22e98a52272ce8f3d26828

    • SHA1

      caf1b88788d6e9b6ee1b00e32bad275e47f24e36

    • SHA256

      e4754a850e88395056493d13b8af02a47b8998abfe1aa1b1fb46cc6cea85ccea

    • SHA512

      438b6b74dd687758c9d356ce5f5b0c32212dd4354f61be2eed557146a724e3f6d6bac1d11e99ba1e8c158256bba32606522b635131a3a20fc9a5c11fc555846b

    • SSDEEP

      3072:dmzPhtX/mMCra0YNclZlIfceHdeRr2qOQpq3HNr5GnV54c4NthaeKU3d5vEiLqsx:ahJ/rgUfiRCqO+uNk54t3haeTFLel6ZX

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks