General

  • Target

    3ae8c2edfeeac185d642e2dfc667a654017521ee39fae1a1d4c9d4879a9a2f4dN

  • Size

    128KB

  • MD5

    ba438314f6072963a8f9978945f4e5e0

  • SHA1

    c3a8807a3fe0c5f47f5122b79bed1d1c2887e9c3

  • SHA256

    3ae8c2edfeeac185d642e2dfc667a654017521ee39fae1a1d4c9d4879a9a2f4d

  • SHA512

    653a29316a86e225a9d9f457cedc70436eeae6a23d278cea2e0f2572231adb6667d207e305d8e0e90e77fbe7992b9d351d890c3d2abda02c16bc464b1aaaadc7

  • SSDEEP

    3072:rryosWKTMYUSmY1YdCheBUhiEHTcsrLeKlj9pui6yYPaI7DehizrVtN:rrRsWI7JmY18KeBUhiEz+Wpui6yYPaIv

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ae8c2edfeeac185d642e2dfc667a654017521ee39fae1a1d4c9d4879a9a2f4dN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections