General

  • Target

    c9674a6efb5537c53a98b1814875c7395ae1c48b7eb869b6c59d0dbbd2efe6f0N

  • Size

    128KB

  • MD5

    fcaa87100ae4b96297205bdc9c640920

  • SHA1

    cbaf99fb79657fe422de1063c991250c13213ed6

  • SHA256

    c9674a6efb5537c53a98b1814875c7395ae1c48b7eb869b6c59d0dbbd2efe6f0

  • SHA512

    6a705e108ed59b1649938353e445061fdffd6ef9f38249488f34c5a13e0f9fa096137bd60d4c64841c13d3617e458b0317ee69927cdcb67084563d01b1bc0bd1

  • SSDEEP

    3072:VI1KLto5q4h9MVDXbe5Lx7cEGrhkngpDvchkqbAIQxgFM9MD:Gpj9oDS5Lx4brq2Ah1FM6D

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c9674a6efb5537c53a98b1814875c7395ae1c48b7eb869b6c59d0dbbd2efe6f0N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections