General

  • Target

    b0f6cbe8bc0752828e38180453856ec45e2d7c31bbcdc5330a35c50b02abd615N

  • Size

    128KB

  • MD5

    81159d84dce0f7f8ebf53c15eb9f2de0

  • SHA1

    4d627df5999d758e00cc04f7a280a9e5f713fcd0

  • SHA256

    b0f6cbe8bc0752828e38180453856ec45e2d7c31bbcdc5330a35c50b02abd615

  • SHA512

    44b0322c11e9241fa5464e2c27361882b02cfa688c2366f4326583916318d6083b9f983a2ae844381b8f7d786ffee00082ee6aabd908ece190a409e11ab36a39

  • SSDEEP

    3072:/twejy5FbaJt9f1jQ25cpd6Yeuw0v0wnJcefSXQHPTTAkvB5DdcgFM9o:iejkFbaJzlHE6T0tnJfKXqPTX7D7FMm

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0f6cbe8bc0752828e38180453856ec45e2d7c31bbcdc5330a35c50b02abd615N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections