General

  • Target

    8fa776aae836e05d418d8356eb515524a0917996268a79379ede72be5a597b68

  • Size

    176KB

  • MD5

    ace30631dfd705802c672878802bc21b

  • SHA1

    00afb4e712308cf97cf2cf434da5028516119dbd

  • SHA256

    8fa776aae836e05d418d8356eb515524a0917996268a79379ede72be5a597b68

  • SHA512

    e100b13430e94d630e738b3010f553198f2eb6c591085bb5f8f15fddf3f1c2018757c81ea99af4bef6ca3b186707a894a3b2e630c8c22dfdc129e260ac9b515d

  • SSDEEP

    3072:nVV3cimm1LMj3EecEy032yaCMMq9FIUPv9XOVw1FaX6lwzmOJfYerMMq9FIUvw3:nbczULMbfcE4f9FIUpOVw86CmOJfTo94

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8fa776aae836e05d418d8356eb515524a0917996268a79379ede72be5a597b68
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections