General

  • Target

    79de4ddd133071e0a9cfbcc67694d202e6c1e1e6a1b0d59ed6c4c9c8cbf367e2N

  • Size

    192KB

  • MD5

    bd7e67ef541f2c71b45e1fa1bed007a0

  • SHA1

    69f5a4766facd78c1fb7ac706e034cffb5f96684

  • SHA256

    79de4ddd133071e0a9cfbcc67694d202e6c1e1e6a1b0d59ed6c4c9c8cbf367e2

  • SHA512

    096d0fc64dbcf34501c1c8b6fa04c7c355a3796cb1588837fc13404982126419ba8c24ca2e30d2ffee198ef4b830aab7e5ec9bb61e0caf9111402b832d0ffdbe

  • SSDEEP

    3072:Wh76QgFMhVKMYK3ERFFFfdeX5nLoYDGNlib5qfpfGU4lfirgjZXmK:TNuT1E8JL7GNlighD4lTjZXN

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 79de4ddd133071e0a9cfbcc67694d202e6c1e1e6a1b0d59ed6c4c9c8cbf367e2N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections