General

  • Target

    628df64a8e600ecbc5c5116f88e78041a0003d492b41195c3a7f6aea0f3ad61fN

  • Size

    208KB

  • MD5

    d501c6a66547fb1a936dd6264bddf9d0

  • SHA1

    3a2cb964081c6d01507734d655bcbaf6123afbbc

  • SHA256

    628df64a8e600ecbc5c5116f88e78041a0003d492b41195c3a7f6aea0f3ad61f

  • SHA512

    fe27b0f8dcb983a70d6d02fd59fa42467edf7d084e3ce94cf0c60f222839c1eaaeb9df9df2dbe519e5168ca03feb295e5f01b91366d923b3a3fff7df1cfeae66

  • SSDEEP

    6144:qkf+UJc70DX4EYtCwGtMtkiXOoloMr1JeSldqP7+x55KmC:JfrJAChtMtkM71r1MSXqPix55Kx

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 628df64a8e600ecbc5c5116f88e78041a0003d492b41195c3a7f6aea0f3ad61fN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections