Overview

overview

10

Static

static

10

d9930c1fea...18.exe

windows7-x64

10

d9930c1fea...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9930c1fead0bc311631e4541640cea1_JaffaCakes118.exe

  • Size

    456KB

  • Sample

    240504-yt3b6shf6z

  • MD5

    d9930c1fead0bc311631e4541640cea1

  • SHA1

    eb7787de1c1ae406b59e1183a0c77e0463562011

  • SHA256

    1ff60686eba6aec3cdac97567f6051d5d0c5b076b0f417f596d0a123a33f20b3

  • SHA512

    d352a8aabcedcb421702a11605c13d8fa8126cd49bdfc18b552061049532ea0cca21f176d0106c20a51bbf8c66d1c6dc4313ea49f99b4ee64f37b3f90484369d

  • SSDEEP

    12288:fM0wIKfDy/phgeczlqczZd7LFB3oFHoGnFjVZnykJGvpHGdm:00wFfDy/phgeczlqczZd7LFB3oFHoGn+

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      d9930c1fead0bc311631e4541640cea1_JaffaCakes118.exe

    • Size

      456KB

    • MD5

      d9930c1fead0bc311631e4541640cea1

    • SHA1

      eb7787de1c1ae406b59e1183a0c77e0463562011

    • SHA256

      1ff60686eba6aec3cdac97567f6051d5d0c5b076b0f417f596d0a123a33f20b3

    • SHA512

      d352a8aabcedcb421702a11605c13d8fa8126cd49bdfc18b552061049532ea0cca21f176d0106c20a51bbf8c66d1c6dc4313ea49f99b4ee64f37b3f90484369d

    • SSDEEP

      12288:fM0wIKfDy/phgeczlqczZd7LFB3oFHoGnFjVZnykJGvpHGdm:00wFfDy/phgeczlqczZd7LFB3oFHoGn+

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks