General

  • Target

    f3bab6361de1de7b831ee5e50b38ef119299086913bb0188a5468da881f41c5d

  • Size

    176KB

  • MD5

    e7a186ab17caa9fc3637cb5ce9f5da50

  • SHA1

    7cd09cb476cf26d90c9c9286befe11b9ff6a68dc

  • SHA256

    f3bab6361de1de7b831ee5e50b38ef119299086913bb0188a5468da881f41c5d

  • SHA512

    16180737b445c02ac2f43877e6ad46f3b2e6c6d7950614a69231265a34a5170c417992a73f4fb02e846af72720477f5405d5cfd0875a5740145960867e74d933

  • SSDEEP

    3072:pZScNQ5f0R+vVegGI5e2/3ReBEy032yaCMMq9FIUPv9XOVw1FaX6lwzmOJfYerM8:bGfJedI5z/0BE4f9FIUpOVw86CmOJfTb

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f3bab6361de1de7b831ee5e50b38ef119299086913bb0188a5468da881f41c5d
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections