General

  • Target

    c36ac2e8c3720c3ad363b5dc35d78553ee232d6cc8e7f4ddd9e6c2ba4ea277f3N

  • Size

    111KB

  • MD5

    23dee29257d1b4d32a9f0d59a0d52470

  • SHA1

    bfcfc68ffb21cbbb306661ff9b02187981ea869c

  • SHA256

    c36ac2e8c3720c3ad363b5dc35d78553ee232d6cc8e7f4ddd9e6c2ba4ea277f3

  • SHA512

    4470d10f22737406e86691da94629aafadcc4520cc08cceb79eed3229ae630716077913cec102e03e087111d5966f255d1ceff8a799c89c5f92e742090d1627e

  • SSDEEP

    3072:48SBzh2lSeDameBw0v0wnJcefSXQHPTTAkvB5Ddj:Z6h2IeW9TtnJfKXqPTX7DB

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c36ac2e8c3720c3ad363b5dc35d78553ee232d6cc8e7f4ddd9e6c2ba4ea277f3N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections