General

  • Target

    6656d0ceeee25bdf80f139e3f600e478ee17c1e4e5bc767f3b2a347a9c419b06N

  • Size

    176KB

  • MD5

    bf6d3448018d19d7a699386c95f8ee00

  • SHA1

    6ee6cb02676e2d5e0a41e653af75abbb78dd5d16

  • SHA256

    6656d0ceeee25bdf80f139e3f600e478ee17c1e4e5bc767f3b2a347a9c419b06

  • SHA512

    e370294b518cfddbe501f7c80d435ebf06b686f2e77820d12a5ef7f44eced544858d6a8305eef574ad71775dbbbf570bc3340daa66bf56f059e3d3cb4b584969

  • SSDEEP

    3072:/G7bZkYHVBuieEvzem/cjfe1Ey032yaCMMq9FIUPv9XOVw1FaX6lwzmOJfYerMMt:/G7beYHVBuieEvzemf1E4f9FIUpOVw89

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6656d0ceeee25bdf80f139e3f600e478ee17c1e4e5bc767f3b2a347a9c419b06N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections