Overview

overview

10

Static

static

10

ec5e57c93f...18.exe

windows7-x64

10

ec5e57c93f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ec5e57c93f546914d4998b42079a050b_JaffaCakes118.exe

  • Size

    332KB

  • Sample

    240505-lj8d8aeb3w

  • MD5

    ec5e57c93f546914d4998b42079a050b

  • SHA1

    4c13ced985736ac615f6869375a017cfe47c307e

  • SHA256

    cfe05957ed5ab9e72b9ae65955f2bab6faf2f523bdfa39dfe84c19630bda7b33

  • SHA512

    c79b6a09454daed1ad448ac17f68dfa4ac6f7f46eb51cba68866c053b3e03e962e25f6592cc2ad6c8f86ef0380379b06d60211309f30f211d49a58e805130938

  • SSDEEP

    6144:8nAXCiAsYkwcIUgM4EQ8o0YkwcIQshr1R6xie8opqXgKTpgtYOWlGmMvkqAlDiyO:3C51RFpogXnV4MlGN1AlDkvXvtxDWVmF

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      ec5e57c93f546914d4998b42079a050b_JaffaCakes118.exe

    • Size

      332KB

    • MD5

      ec5e57c93f546914d4998b42079a050b

    • SHA1

      4c13ced985736ac615f6869375a017cfe47c307e

    • SHA256

      cfe05957ed5ab9e72b9ae65955f2bab6faf2f523bdfa39dfe84c19630bda7b33

    • SHA512

      c79b6a09454daed1ad448ac17f68dfa4ac6f7f46eb51cba68866c053b3e03e962e25f6592cc2ad6c8f86ef0380379b06d60211309f30f211d49a58e805130938

    • SSDEEP

      6144:8nAXCiAsYkwcIUgM4EQ8o0YkwcIQshr1R6xie8opqXgKTpgtYOWlGmMvkqAlDiyO:3C51RFpogXnV4MlGN1AlDkvXvtxDWVmF

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks