General

  • Target

    4238829c98252ac9151f49309591d67e2d921bf17bff5d318e2cba3b1e8c98e4

  • Size

    104KB

  • MD5

    c83ba1ba7f6c62d01b76c27271a73201

  • SHA1

    5c278ab74650118fa8cf12bdf901da51a10dd8aa

  • SHA256

    4238829c98252ac9151f49309591d67e2d921bf17bff5d318e2cba3b1e8c98e4

  • SHA512

    5f20347431e9c7f35e3cc3b80ac058d1b4a6790b8338953f2d9d278280921d1350b9f42b59db60c3bec7c308da0b60c76fefd263ce5fee0465fc89608ea5d517

  • SSDEEP

    3072:UAxVsPy2ifAe5hNx7cEGrhkngpDvchkqbAIQS:UG2R85fx4brq2Ahn

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4238829c98252ac9151f49309591d67e2d921bf17bff5d318e2cba3b1e8c98e4
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections