General

  • Target

    81501e6f6314bc56a601e8c774664f3fb8f09832c334342c3b36f3c6d7f0db2dN

  • Size

    128KB

  • MD5

    b293d72b32eea9d5ae72d97a6ea683c0

  • SHA1

    c2c1403dc56310c14ccaadae19883eca722e7376

  • SHA256

    81501e6f6314bc56a601e8c774664f3fb8f09832c334342c3b36f3c6d7f0db2d

  • SHA512

    de839eaf15505a1e579fb7dfb43ee6cb5ae56b3481048b8230864846b0312bf7758268113f93e1b4f5f2ced03da7df63e0be9bf27afdba3143a92866dc72976f

  • SSDEEP

    1536:7xgvrVERaNXmUm4W0WKTiahbLJmqwRQDmRfRa9HprmRfRJCLIXG:NOp6aktZtXaSqweDm5wkpHxG

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 81501e6f6314bc56a601e8c774664f3fb8f09832c334342c3b36f3c6d7f0db2dN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections