General

  • Target

    ad30dc7ed12866bb964794afe01c3fd83a4f5b1944f38af151227d43fa8a3cafN

  • Size

    256KB

  • MD5

    f9034fac8198fcc4168fb36d56acc230

  • SHA1

    c34e3e1e0bdac24296d6f7d8d8641c88c70c1bcb

  • SHA256

    ad30dc7ed12866bb964794afe01c3fd83a4f5b1944f38af151227d43fa8a3caf

  • SHA512

    7a1c5f84abf6d91202ec08f7c099de4c0458275faa121d256cf08fbefef1a1d167cd3e7be265f2d188ce99477b662aa0cdf27aa003f3426560714f0c286153c3

  • SSDEEP

    6144:7ggY5lR9C81NByvZ6Mxv5Rar3O6B9fZSLhZmzbBy9:kgE9C8HByvNv54B9f01ZmHBy9

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad30dc7ed12866bb964794afe01c3fd83a4f5b1944f38af151227d43fa8a3cafN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections