General

  • Target

    virussign.com_af6f96ca9d49de7d899ad343bb3a86b0.vir

  • Size

    135KB

  • MD5

    af6f96ca9d49de7d899ad343bb3a86b0

  • SHA1

    cc26a2e8de517a580e7396fae8875732d9a77b42

  • SHA256

    32d8274da011f816f574a254a3ef67ae72ed2066d42804d1d87244c5245d8000

  • SHA512

    e0e6d8e71f4338b37ed7e3f10574e4989b137ae54d9df7f61f7254368dc58e6b90fc358b9639eff37ba58810212828876a7a39a25f8f4410d772b8621c8ff161

  • SSDEEP

    3072:VyzneXjWlEknjV5jdMeXv+bT2K8Qr5+ViKGe7Yfs0a0Uoi:ITeknZ5jdM1bT2K9cViK4fs0l

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_af6f96ca9d49de7d899ad343bb3a86b0.vir
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections