General

  • Target

    5ee8484060530f8eb615364a41d3df03ecf688c2fb4be4008c6703dfb578c295N

  • Size

    128KB

  • MD5

    ca7c9fd89ff2b8e172867f6a494c8900

  • SHA1

    6bf379a6174b817e2ea86678fc32494b904139fe

  • SHA256

    5ee8484060530f8eb615364a41d3df03ecf688c2fb4be4008c6703dfb578c295

  • SHA512

    ef3b44648e13dfc9209e2bb4895a544a0749bb253c98d8d526a3c2648e11d7e09bbc6144d463fab63d3a54a78ca447f0d357e7e66f02ed29273f6e102eb81133

  • SSDEEP

    3072:rzzksGYQ1KF0olfeTE9pui6yYPaI7DehizrVtNU:/zksGJ0F0ol2Cpui6yYPaIGcC

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ee8484060530f8eb615364a41d3df03ecf688c2fb4be4008c6703dfb578c295N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections