General

  • Target

    34870e689737c16a98918134cf63e1f63526a2f7ab973cd84cb440c888067440N

  • Size

    120KB

  • MD5

    d56ad8fbf9db40e4d1f4becf90ad2a90

  • SHA1

    b7d25b2f2f511722c3cc897c3a03282fb6bc6a81

  • SHA256

    34870e689737c16a98918134cf63e1f63526a2f7ab973cd84cb440c888067440

  • SHA512

    046ef4b31d43143bb77ceec2876152869a3da4b38d9af11900c14998168e14e8dfbc15dbe0e0634361ed2d74cc47caff9df4dca56b38d9a23aaf42c4f874ec9b

  • SSDEEP

    3072:EKOxK5Wfwe1L1zJlJew203H/6TC+qF1SsB1bw4AVRrd9:cQ5Wf7Lmw9C81NBy9

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 34870e689737c16a98918134cf63e1f63526a2f7ab973cd84cb440c888067440N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections