Overview

overview

10

Static

static

10

cff8856f82...18.exe

windows7-x64

10

cff8856f82...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cff8856f823ff7cd92650dbea0ec0c00_JaffaCakes118.exe

  • Size

    6.7MB

  • Sample

    240505-lfzb5sdh8v

  • MD5

    cff8856f823ff7cd92650dbea0ec0c00

  • SHA1

    b471baf38e58eae51fe92f0778f784310c586c70

  • SHA256

    dd18c3e61e9b6ecd58a6c4197727ed9fa3520cf7aa34db53cf4bdbacdd3d8858

  • SHA512

    0abe85f7c091b4ec043d33bc9586b119de2d9a8ba247acda373d1dd7fbd7516e457f1efebe1baa91c89072553a3b4cf6ca14407a4fec171bc7db82ef0220525f

  • SSDEEP

    196608:5EaSHFaZRBEYyqmS2DiHPKQgwUgUjvho4wzlF65i6YxE+a3:5EaSHFaZRBEYyqmS2DiHPKQg3jvZwNVY

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      cff8856f823ff7cd92650dbea0ec0c00_JaffaCakes118.exe

    • Size

      6.7MB

    • MD5

      cff8856f823ff7cd92650dbea0ec0c00

    • SHA1

      b471baf38e58eae51fe92f0778f784310c586c70

    • SHA256

      dd18c3e61e9b6ecd58a6c4197727ed9fa3520cf7aa34db53cf4bdbacdd3d8858

    • SHA512

      0abe85f7c091b4ec043d33bc9586b119de2d9a8ba247acda373d1dd7fbd7516e457f1efebe1baa91c89072553a3b4cf6ca14407a4fec171bc7db82ef0220525f

    • SSDEEP

      196608:5EaSHFaZRBEYyqmS2DiHPKQgwUgUjvho4wzlF65i6YxE+a3:5EaSHFaZRBEYyqmS2DiHPKQg3jvZwNVY

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks