General

  • Target

    e6c5c03e9e5423737ec9a2992860d4a0b4fc88e416adcb61fb574e6588438ab5N

  • Size

    128KB

  • MD5

    c5e104f8e4f52e03db8984f6004a7590

  • SHA1

    aa637c67d93b298286d2955f73e1c77428cb780a

  • SHA256

    e6c5c03e9e5423737ec9a2992860d4a0b4fc88e416adcb61fb574e6588438ab5

  • SHA512

    d3978995a656abbed57912fd9a8ff9e356d99236be97ba475fd671560b05b6b74dafe8f5156c90c0ec714ab287c9d0ec937b56cc97777da86792ae1b6d503913

  • SSDEEP

    3072:GoehYhh+dD/F1uv3eWS4oe5jx7cEGrhkngpDvchkqbAIQxgFM9MD:GovvwDtc6U5jx4brq2Ah1FM6D

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e6c5c03e9e5423737ec9a2992860d4a0b4fc88e416adcb61fb574e6588438ab5N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections