General

  • Target

    ef2d7f646e51d750db9226402ffad9474be9587b949380689409ba17a6bc8f81N

  • Size

    264KB

  • MD5

    9d94e13ec16958bc2c177e049fa33a60

  • SHA1

    1cad53f96b90baaa6f7484cd6fa87f6ce4366ff2

  • SHA256

    ef2d7f646e51d750db9226402ffad9474be9587b949380689409ba17a6bc8f81

  • SHA512

    aac58a68e144f4aa87e1905a4a92233a0b0761050d1c2f5e915fd0f86382ed0d02623cadc8b8e78bb86f101aab17dc9f915b7ca8ad811d4e1e92c57523c0f105

  • SSDEEP

    6144:7s/gnyRU/pui6yYPaIGckZay1aEI9Kq5pui6yYPaIGckv:QBRmpV6yYPOn17IpV6yYPo

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef2d7f646e51d750db9226402ffad9474be9587b949380689409ba17a6bc8f81N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections