Overview

overview

10

Static

static

10

d1be53864d...40.exe

windows7-x64

10

d1be53864d...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d1be53864dd8a1d0c69694ab7d0d3be1b67cd84093e8c5b2929b5f1db0bfbb40

  • Size

    240KB

  • MD5

    821dae090624b9533af633c168732043

  • SHA1

    926a7ceae56654196e37b0b691282aff3c0c4faa

  • SHA256

    d1be53864dd8a1d0c69694ab7d0d3be1b67cd84093e8c5b2929b5f1db0bfbb40

  • SHA512

    57b39b12981cf3d42668169460fed39dccb31edef4bc2fea45320849fc12933453ac7f25bea66290bbb7ee7210efc8227ecb7559762bf8318e005dcac0c4ca47

  • SSDEEP

    6144:e76Ibd3Ppui6yYPaIGckfru5xyDpui6yYPaIGV:e71dfpV6yYP4rbpV6yYPk

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d1be53864dd8a1d0c69694ab7d0d3be1b67cd84093e8c5b2929b5f1db0bfbb40
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections