General

  • Target

    119ac7afadaaa295e951a4c1c73ecc3c2a633f0fc681f8066c6aef6d3f6a43caN

  • Size

    104KB

  • MD5

    e9fb55e32475c925ecd9981f5d184ce0

  • SHA1

    c6aa8a2cb77d08e442b226115793c0ef285c0bf8

  • SHA256

    119ac7afadaaa295e951a4c1c73ecc3c2a633f0fc681f8066c6aef6d3f6a43ca

  • SHA512

    0077364add51c6fa3fd543f0ef443843d3c84ca6245d2e3a1e924523228b2185764e4defff4fd6ee339317287f296eb3750396234046908158b191125b5796ac

  • SSDEEP

    3072:DVXTcWPGGQNp+6ewdBFsghuZFe5lx7cEGrhkngpDvchkqbAIQ:lTnQjrsPo5lx4brq2Ah

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 119ac7afadaaa295e951a4c1c73ecc3c2a633f0fc681f8066c6aef6d3f6a43caN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections