General

  • Target

    3ea5333ea07f71837d1265d38895dbecb44ec448c378a922204a17be6ac04bbcN

  • Size

    120KB

  • MD5

    d5f3d1ec2aa082696f7d9ebe273b41e0

  • SHA1

    9573087476d7bd2f2820c7c4d98151be7dd30657

  • SHA256

    3ea5333ea07f71837d1265d38895dbecb44ec448c378a922204a17be6ac04bbc

  • SHA512

    6b5e391b1f6ac847d07083d498926b890fa24b9110d83259e3571aaa7fb452292a9380e8c21f8ff6d01a77bf45a892da20fdf119913ea361dee7419692513e40

  • SSDEEP

    3072:xAINAkgJPmBp5yR8Se6203H/6TC+qF1SsB1bw4AVRrd9:1I+HEU69C81NBy9

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ea5333ea07f71837d1265d38895dbecb44ec448c378a922204a17be6ac04bbcN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections