Overview

overview

10

Static

static

10

16690b8a7f...18.exe

windows7-x64

10

16690b8a7f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    16690b8a7f744f0e2478f92aac55c7f0_JaffaCakes118.exe

  • Size

    109KB

  • Sample

    240505-kpsehscg4s

  • MD5

    16690b8a7f744f0e2478f92aac55c7f0

  • SHA1

    582410c978f6a43444e90209df3ecca78626c53b

  • SHA256

    6965552310202f545bebb95a23f484dbfa2717238ffd9b6eab002083fdf6b8e7

  • SHA512

    4119339fca5c2c6573bf7fff98e9c8a76d937c4c1960327b6f8fbcbe5a3000d5bd9bbafa3acd787d263019f8576dd4726abc9f835568987429229da57194761f

  • SSDEEP

    3072:DXrek0kJsTS91UrDYgB+Nt4J9PLCqwzBu1DjHLMVDqqkSp:G6gS91skNt4J9jwtu1DjrFqh

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      16690b8a7f744f0e2478f92aac55c7f0_JaffaCakes118.exe

    • Size

      109KB

    • MD5

      16690b8a7f744f0e2478f92aac55c7f0

    • SHA1

      582410c978f6a43444e90209df3ecca78626c53b

    • SHA256

      6965552310202f545bebb95a23f484dbfa2717238ffd9b6eab002083fdf6b8e7

    • SHA512

      4119339fca5c2c6573bf7fff98e9c8a76d937c4c1960327b6f8fbcbe5a3000d5bd9bbafa3acd787d263019f8576dd4726abc9f835568987429229da57194761f

    • SSDEEP

      3072:DXrek0kJsTS91UrDYgB+Nt4J9PLCqwzBu1DjHLMVDqqkSp:G6gS91skNt4J9jwtu1DjrFqh

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks