General

  • Target

    05b24ca62c0d1ee4812add1c6de6b203d6258366b5014cbf1c5385ad1361765cN

  • Size

    120KB

  • MD5

    f6e525e01d503a4dfbcc684f67f213b0

  • SHA1

    4855b59d895eb256bcc4dc4047d6c67240d6f62d

  • SHA256

    05b24ca62c0d1ee4812add1c6de6b203d6258366b5014cbf1c5385ad1361765c

  • SHA512

    1c0697a6799e81163f03e95badc40ebade9eed165667bbf0d8e2280ac995881d037708fffff68d02a255cd745b17aa4ceaa61457c90bc15d6ef5ca384327fa36

  • SSDEEP

    3072:H1fPd9JCYh1tTe2vzeQ203H/6TC+qF1SsB1bw4AVRrd9:Hb9JCY1e2vaQ9C81NBy9

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 05b24ca62c0d1ee4812add1c6de6b203d6258366b5014cbf1c5385ad1361765cN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections