General

  • Target

    c5b9d12a064077bc7a2eb3b64436631480266d156408cef0484e04e2f78e9730N

  • Size

    227KB

  • MD5

    f8f13c5b93552e917314e964cb8d6cc0

  • SHA1

    6b7810ef4a9778e84b2e2e6d99fde9d56d1454c6

  • SHA256

    c5b9d12a064077bc7a2eb3b64436631480266d156408cef0484e04e2f78e9730

  • SHA512

    19a48022adabf9b03c35aea33685a455250ea4cdf6a0b9fd1e5a9507518d92931f5e896eff9529811355af6d7597a739bd613d2d74549c6768f20ffb55ca22e9

  • SSDEEP

    3072:gGFFNcRb1y3b1oVi8hYJ7cMveyGpwoTRBmDRGGurhUXvBj2QE2HegPelTeIdI7jA:gGr1oViZ7oQm7U5j2QE2+g24Id2jFHu

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c5b9d12a064077bc7a2eb3b64436631480266d156408cef0484e04e2f78e9730N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections