Overview

overview

10

Static

static

10

acba6426f3...18.exe

windows7-x64

10

acba6426f3...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    acba6426f3edbe68dc497c355bc57b01_JaffaCakes118.exe

  • Size

    192KB

  • Sample

    240505-lbjqwsgh84

  • MD5

    acba6426f3edbe68dc497c355bc57b01

  • SHA1

    b0a050b2f4e07cb21aa8f9b2a507872ed0271013

  • SHA256

    22ee6da51ddc8d204c62769e628b5cde8b87825bad0ea5d2f6df0d44f6692022

  • SHA512

    7c2f699367c477b9ded921bf468f78d5c21089f10384c225909842f6d5aa211b3712bc14f06198daf709b06009afd367d760e2a625073457f4dc88234a553232

  • SSDEEP

    3072:cnGaYg6qQ7L3xte0r4MKy3G7UEqMM6T9pui6yYPaI7DehizrVtNe8ohrQ3N:cnGaYg+7Vwhndpui6yYPaIGckfruN

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      acba6426f3edbe68dc497c355bc57b01_JaffaCakes118.exe

    • Size

      192KB

    • MD5

      acba6426f3edbe68dc497c355bc57b01

    • SHA1

      b0a050b2f4e07cb21aa8f9b2a507872ed0271013

    • SHA256

      22ee6da51ddc8d204c62769e628b5cde8b87825bad0ea5d2f6df0d44f6692022

    • SHA512

      7c2f699367c477b9ded921bf468f78d5c21089f10384c225909842f6d5aa211b3712bc14f06198daf709b06009afd367d760e2a625073457f4dc88234a553232

    • SSDEEP

      3072:cnGaYg6qQ7L3xte0r4MKy3G7UEqMM6T9pui6yYPaI7DehizrVtNe8ohrQ3N:cnGaYg+7Vwhndpui6yYPaIGckfruN

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks