General

  • Target

    4c854c629b89df5ee5c67b9f6e035ab8eacd52bd323bb22762ceb0f578a50ad6

  • Size

    104KB

  • MD5

    ab67c270e557a183445ad60267021bc4

  • SHA1

    aba60cdc79eab2368badf8742aab071e912d7e38

  • SHA256

    4c854c629b89df5ee5c67b9f6e035ab8eacd52bd323bb22762ceb0f578a50ad6

  • SHA512

    e02d78fd6d91e90ee7e83b59cd21bb490f92b8600687a2fb5820bd43e0445d4e8041482881bb89b4ed484a79ab26e8d4f801f4406f9fec0ab1e2ee0824f1f776

  • SSDEEP

    3072:zg4TNajTzgp9Fe54ax7cEGrhkngpDvchkqbAIQ:zjNGTio54ax4brq2Ah

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4c854c629b89df5ee5c67b9f6e035ab8eacd52bd323bb22762ceb0f578a50ad6
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections