General

  • Target

    85cfd4f05ff0d16dafbab23140de174216ee956ac7d0a06fad92bf0fd6df8bdc

  • Size

    128KB

  • MD5

    d30459219e99eb543bdda91fee1be5b4

  • SHA1

    8bc4f99ab33cbdd0974636301f33ae06eefedc64

  • SHA256

    85cfd4f05ff0d16dafbab23140de174216ee956ac7d0a06fad92bf0fd6df8bdc

  • SHA512

    7118b71d82664db335bb4e033307267e59e932be2115d9acb65a72ac0dbfa75426a25973031917f7ed0b0c5a53fdbd76e33aa7594592774576096298b83ee5bd

  • SSDEEP

    3072:svnoQbt/ahhgL8oEeZ9pui6yYPaI7DehizrVtN:so5hhgg4Xpui6yYPaIGc

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 85cfd4f05ff0d16dafbab23140de174216ee956ac7d0a06fad92bf0fd6df8bdc
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections