General

  • Target

    f16c3826bea969bc31e91b3a2e65363cb708344870d34f33b2c7f14986d4f485N

  • Size

    128KB

  • MD5

    bf55173d414a4511ac07595deda056a0

  • SHA1

    b8a3a3cfd1c77dde62d5495d6567e038b8c7aadc

  • SHA256

    f16c3826bea969bc31e91b3a2e65363cb708344870d34f33b2c7f14986d4f485

  • SHA512

    8d17b1d493ede32475187b1ce83f143f0f4b0900fca595b2adcad79f74559ae18fef17961c0de35da6d355507b968cf44ab91dd3a05c219e008cce5b91a7d5c6

  • SSDEEP

    3072:rRxAInrAEGjkhI9uakyS/fegE9pui6yYPaI7DehizrVtNU:sIkEGwGI/2hpui6yYPaIGcC

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f16c3826bea969bc31e91b3a2e65363cb708344870d34f33b2c7f14986d4f485N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections