General

  • Target

    c19180fbd86519a8cfd1f138b9c20742a6f0c85c8dce801dc7fe0729374e148eN

  • Size

    128KB

  • MD5

    b37d2a75ac26534521ac5a9135443910

  • SHA1

    fb502b4cfdb7fa83b72396684043a5cdabaf4834

  • SHA256

    c19180fbd86519a8cfd1f138b9c20742a6f0c85c8dce801dc7fe0729374e148e

  • SHA512

    dad80ecd8d48ba9185c4c0fd375c314429a334888f82a999f27218c4b0b1b4e9519487929e017be8ed41f90e892a1f4c92f4823af0d99cab4db77902be19dcec

  • SSDEEP

    3072:RwPxRleHsWJ7tMk5LrHuesUEdmjRrz3TIUV4BKi:UleHsAlxrHFbEdGTBI

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c19180fbd86519a8cfd1f138b9c20742a6f0c85c8dce801dc7fe0729374e148eN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections