General

  • Target

    virussign.com_64481ecd1d413691657d0407a3e21160.vir

  • Size

    464KB

  • MD5

    64481ecd1d413691657d0407a3e21160

  • SHA1

    b676e566bbe203ff8bcb8e86d31f7ce265554a73

  • SHA256

    c27a1a6199670224bc3230468b08bee8cad1795d2b14344237b2225044c8ad85

  • SHA512

    45c3ad601962e7e72cf6089257b84f1c9f0a456639f878258f43f18468353876937ae32a48abfdd8fd3f08d448feebf3d78d548e043a65a6ca412c16499477b8

  • SSDEEP

    12288:J4wFHoSTeR0oQRkay+eFp3IDvSbh5nPVP+OKaf1VM:VeR0oykayRFp3lztP+OKaf1VM

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_64481ecd1d413691657d0407a3e21160.vir
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections