General

  • Target

    virussign.com_0d5f643374986d3cf400c4f4c8563e10.vir

  • Size

    161KB

  • MD5

    0d5f643374986d3cf400c4f4c8563e10

  • SHA1

    d90b46b227ec9fc243e24b5cdd7773d1108346d0

  • SHA256

    579e0c30e260ad222a2fec08269878a285f7b3022c2748f063620f4ae7f04250

  • SHA512

    c0dbfd9dc3625b8166f6fc41a0bff0aae2b7c8de5cd7518adc1b2127eb0406db5fae371c04bc471b2c2006cf15bf39b8bf1f059fb267aed594b35f3ffab4d6a9

  • SSDEEP

    3072:Gp8yd9jBF72284/UcV5jkxVwtCJXeex7rrIRZK8K8/kv:nyfb72wUcVlkxVwtmeetrIyR

Malware Config

Signatures

  • Berbew family
  • Malware Dropper & Backdoor - Berbew 1 IoCs

    Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_0d5f643374986d3cf400c4f4c8563e10.vir
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections