Overview

overview

10

Static

static

10

virussign.exe

windows7-x64

10

virussign.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    virussign.com_e26d22ab70f1eaab59595b1acd98c980N

  • Size

    111KB

  • MD5

    e26d22ab70f1eaab59595b1acd98c980

  • SHA1

    9914039c752750d036b5d97e7f024d7f98221546

  • SHA256

    263ee8dcffcfec8d06cb4a3dfefe0624429d20c009afdb565d35b0e7151ae38c

  • SHA512

    34454d78fc72ab6a0d2dd3cee404e1915680047dfda69f8cfcc0ca4b5feea72f1fc178c0a81c330530298c568b8ba1bfed39254d7f5992126c71b685d3530c92

  • SSDEEP

    3072:5Tpt1Gb1YCXX4wYjY7ekw0v0wnJcefSXQHPTTAkvB5Ddj:DtinXCUCitnJfKXqPTX7DB

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_e26d22ab70f1eaab59595b1acd98c980N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections