General

  • Target

    virussign.com_f1dd5e360f3d9e0c8e10e18e7e5abd50.vir

  • Size

    768KB

  • MD5

    f1dd5e360f3d9e0c8e10e18e7e5abd50

  • SHA1

    72dc83a6a60cea9e00a3865e84bcbf968c9d1c65

  • SHA256

    5c44cb82dd447eeccd3dd287b3772546897d7be1d3bb3f4a269bb3cbb134d2ef

  • SHA512

    6a2e761946c5b5178a7f634eeab15f664a5aa830aaef834e761ebad93fd5a63eb141463d72c553efa812e26ceefbae3bcdbf89f47b24c522df37212f383de2b3

  • SSDEEP

    12288:Xfwsvg6IveDVqvQ6IvYvc6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHPKgRC4gvO:Xfwvq5h3q5htaSHFaZRBEYyqmaf2qwiv

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_f1dd5e360f3d9e0c8e10e18e7e5abd50.vir
    .exe windows:1 windows x86 arch:x86

    3235d0a66c0a8ca4d8b84f3bea439dce


    Headers

    Imports

    Sections