Overview

overview

10

Static

static

10

17eec724e1...18.exe

windows7-x64

10

17eec724e1...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    17eec724e10ec00346bfd34d0126969b_JaffaCakes118.exe

  • Size

    352KB

  • Sample

    240505-kp361scg5s

  • MD5

    17eec724e10ec00346bfd34d0126969b

  • SHA1

    20bc35350124003ef2825c35cbe24031f003a397

  • SHA256

    94930f5d813b8b590888d130dc7e6c7c1f950c4b6ced4082c8f46f3a2766c2c9

  • SHA512

    c61c100f74699161a02ab9de791335bad64e9696acf2c400f726cf574b50bf092309d344b427b91057620c610f8e6a7f1075316e5b1456babead341071f0bb47

  • SSDEEP

    6144:N0T0dErpr1ItvLUErOU7amYBAYpd0ucyEWJrj1mKZHPSv/rpwMBhpNFdFf52SCaH:6T0dCrCZYE6YYBHpd0uD319ZvSntnhpn

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      17eec724e10ec00346bfd34d0126969b_JaffaCakes118.exe

    • Size

      352KB

    • MD5

      17eec724e10ec00346bfd34d0126969b

    • SHA1

      20bc35350124003ef2825c35cbe24031f003a397

    • SHA256

      94930f5d813b8b590888d130dc7e6c7c1f950c4b6ced4082c8f46f3a2766c2c9

    • SHA512

      c61c100f74699161a02ab9de791335bad64e9696acf2c400f726cf574b50bf092309d344b427b91057620c610f8e6a7f1075316e5b1456babead341071f0bb47

    • SSDEEP

      6144:N0T0dErpr1ItvLUErOU7amYBAYpd0ucyEWJrj1mKZHPSv/rpwMBhpNFdFf52SCaH:6T0dCrCZYE6YYBHpd0uD319ZvSntnhpn

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks