General

  • Target

    f47cf60e8f7a096980a13e5200348fa34c18b152fccfc73f7ae9e1214b50b074N

  • Size

    128KB

  • MD5

    d82036aea528d605b7c9c7a97bb6a170

  • SHA1

    d1b49608241e84c8aac03b4aa198b48033024d7d

  • SHA256

    f47cf60e8f7a096980a13e5200348fa34c18b152fccfc73f7ae9e1214b50b074

  • SHA512

    a751f910d88c0e4496e3ab83cc44d081a2a014fb6ba0cb8d5cc78b7fe1037a501d4bfd94aaa1be6d319a6e27fa08e3d0bfd26c36f222dc06a88ef77eede71447

  • SSDEEP

    3072:nw0EJsSmNcisteR9pui6yYPaI7DehizrVtN:nwuSScisw/pui6yYPaIGc

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f47cf60e8f7a096980a13e5200348fa34c18b152fccfc73f7ae9e1214b50b074N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections