General

  • Target

    5e542470b8c05b636a35fbd1a8186b7eaa1b7ccc11bc9eadee2c84b2eb69d8dcN

  • Size

    111KB

  • MD5

    ef9ab011a75d8a92fb8eb1aefea81480

  • SHA1

    3b9b5995b276f28a99a007ce3d93dcd99ddb8249

  • SHA256

    5e542470b8c05b636a35fbd1a8186b7eaa1b7ccc11bc9eadee2c84b2eb69d8dc

  • SHA512

    b3d4cd09c51a124da9a89aa78eda898177f378b1b19c011bbb27ae494e819a20cec6cf33f39c10efd1f7a7256b0d5f8f3a069ca74e04b43bec0df4e1e5629e85

  • SSDEEP

    3072:DPieEMIP+4/gOEOheZE9pui6yYPaI7Dehib:DPioIZ/gOE30pui6yYPaIGcb

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5e542470b8c05b636a35fbd1a8186b7eaa1b7ccc11bc9eadee2c84b2eb69d8dcN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections