General

  • Target

    adcc9b30f21b00252e7f92592ff77a9cc87184d1f784de1b32cef0b67e196e83

  • Size

    128KB

  • MD5

    95493bd39e56e5e8129540dab3b25088

  • SHA1

    a64f34fd3a847483f5284615e0cf80db97d6263f

  • SHA256

    adcc9b30f21b00252e7f92592ff77a9cc87184d1f784de1b32cef0b67e196e83

  • SHA512

    b69336ab9769cf8890b63c80c4c17edb922473b6b8ae6dc7b091a9d842dff41d13653431d383891ba85173fc35e4cfcfbfd785ec597996e7ee189a478d15c2c9

  • SSDEEP

    3072:FOuWSlI6px+EmaN/4snVqY+2keDE5wkpHxG:FO0u6T+EmaN4snVqY+2/XCA

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • adcc9b30f21b00252e7f92592ff77a9cc87184d1f784de1b32cef0b67e196e83
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections