General

  • Target

    d9c2fd08a49d165dd729d07693f6130a699a8cec09917c23066bfe27ba8ee25fN

  • Size

    104KB

  • MD5

    09cba4c15745de6c3378da19b43590c0

  • SHA1

    4ce11e71127f031fea03aa6aa6403db12b9849cf

  • SHA256

    d9c2fd08a49d165dd729d07693f6130a699a8cec09917c23066bfe27ba8ee25f

  • SHA512

    9896d271e658a4c119f6057ec2562813ea6bbcba9c24d5073f7664aa1cdda5cd2401f14acfc6d509824d1b92576576f20723953cae452e7b3e6aac6b937fb27a

  • SSDEEP

    3072:r6EQ/INRusAqqEWKpf9fdUQe51x7cEGrhkngpDvchkqbAIQS:TRyKplf2r51x4brq2Ahn

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d9c2fd08a49d165dd729d07693f6130a699a8cec09917c23066bfe27ba8ee25fN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections