General

  • Target

    b6938f3f3e03e6e27eb28d5bb267da0171e32ac010d7192b9867dd7df1289f06

  • Size

    111KB

  • MD5

    433688c81dcdf8d1cb3d048aa6135f07

  • SHA1

    f61e67d7ec80840e7ff61c6876fe711dcd7418b0

  • SHA256

    b6938f3f3e03e6e27eb28d5bb267da0171e32ac010d7192b9867dd7df1289f06

  • SHA512

    20e53153ec994e8c964e4c1e91f4029e9c7c29c8a17bc4465f4b0cfdf8f51101d4405845401b78e6e4352b388a7e45cfc43fbae69dff6b78fb0f443f73363ed5

  • SSDEEP

    3072:UGPIYApY6nQFt9bWnoeuFfJ6e4w0v0wnJcefSXQHPTTAkvB5Ddj:UWdgQbVWaJRGtnJfKXqPTX7DB

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b6938f3f3e03e6e27eb28d5bb267da0171e32ac010d7192b9867dd7df1289f06
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections