General

  • Target

    2b3445dd82c12d33af54003fb61d9c0606eafddab3712c92a8f17a8a6d947687N

  • Size

    104KB

  • MD5

    da1a8958d794d5a80e26fb7740e176a0

  • SHA1

    9d59546db4ecd00412c30d4a72b7705d1f612c1b

  • SHA256

    2b3445dd82c12d33af54003fb61d9c0606eafddab3712c92a8f17a8a6d947687

  • SHA512

    be057c771e72ff0dc4541eddb9a8f2d659e56782a42a218c7f2f0c6dd75103050bc77ef1880ae267c79eb63f8c99c83c1f7bca60f9bb029dfe5c47fdb4252ab6

  • SSDEEP

    3072:9qPMdvv4SyD+YtSe5ox7cEGrhkngpDvchkqbAIQ:1dYS85ox4brq2Ah

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b3445dd82c12d33af54003fb61d9c0606eafddab3712c92a8f17a8a6d947687N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections