General

  • Target

    a815e95dad789e774765dc0ed8a64f3a8ef41fd32777f78f289f1f64888bb0f3N

  • Size

    101KB

  • MD5

    ef11907e017111019bba4c5a646ee850

  • SHA1

    b73558a56daf24c657ff1e58a3e33a8b34dfd7ff

  • SHA256

    a815e95dad789e774765dc0ed8a64f3a8ef41fd32777f78f289f1f64888bb0f3

  • SHA512

    4b257e06ad2bb70bfafc9bc25ccbf4e32297b21aa366c5c7ff1e1380b78e708d6baca80f73819fd8f8114334c91457b39f0a177c72913c0e9abe2d22ac6eeab3

  • SSDEEP

    3072:b7i8lb5V21uixhks2AAwKv4e3T3/zrB3g3k8p4qI4/HQCC:3i8ZHiLktAAw0bPBZs/HNC

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a815e95dad789e774765dc0ed8a64f3a8ef41fd32777f78f289f1f64888bb0f3N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections