General

  • Target

    be4f163afabb6f981d39a3c29ca5597b4832dd1119c121a6ea39dcebdc215837N

  • Size

    128KB

  • MD5

    a73388a0ece04d0294da6fef8a211870

  • SHA1

    dea8bb55c91d68e88f4fef4d00a791b215911745

  • SHA256

    be4f163afabb6f981d39a3c29ca5597b4832dd1119c121a6ea39dcebdc215837

  • SHA512

    721b92c83041198787d6c231fa08a053ad8a801b55e0eb7a0cde4b10c385c9209e18c7b2124710216805042339e2ce7276e8e87b335a221155388398d2a50722

  • SSDEEP

    3072:hKw6FBC873aP+RvQI3UeQlj9pui6yYPaI7DehizrVtN:ww6C8TaGB1fUpui6yYPaIGc

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • be4f163afabb6f981d39a3c29ca5597b4832dd1119c121a6ea39dcebdc215837N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections