General

  • Target

    1ff6a95d9404186e85b04862a53a287ea6abed345b120c10bff385657da53177N

  • Size

    240KB

  • MD5

    ae98533b916ff1a4aa31fd330ad27ff0

  • SHA1

    c50d5cb4d9408c6ce62c392ae379725bdfdf7bd7

  • SHA256

    1ff6a95d9404186e85b04862a53a287ea6abed345b120c10bff385657da53177

  • SHA512

    e88e7ee4ba9194e02dd0b86d79dfebc51d5706362d48835a9c829718bcb14868289df93bf51562db10f9034f1aa08feb9c04c197fcb2dc921fba39500dac54c0

  • SSDEEP

    6144:Uvx3WDzYhpui6yYPaIGckfru5xyDpui6yYPaIGV:GWDzkpV6yYP4rbpV6yYPk

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1ff6a95d9404186e85b04862a53a287ea6abed345b120c10bff385657da53177N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections