General

  • Target

    bb175d557e31b17a663390a7801d770e6585e5c8786392dd137a6c82ba9c55ab

  • Size

    111KB

  • MD5

    c9328cc06fcf17963d0a6ca3206165dc

  • SHA1

    f9cd04c261cf48c2f14c2ad207ff1b9c72d31de3

  • SHA256

    bb175d557e31b17a663390a7801d770e6585e5c8786392dd137a6c82ba9c55ab

  • SHA512

    67812cf21ec500b3db9b0a9d181a3d1d5a4054f31dd20ae8beda31d4517ab45aa1f862514659e42ba4b838b5d5464897836e253468a47bb6fbc56dd0d7d77074

  • SSDEEP

    3072:IyWLvzaLvuJ40xfP8ejw0v0wnJcefSXQHPTTAkvB5Ddj:FWL+E3xfP3ltnJfKXqPTX7DB

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bb175d557e31b17a663390a7801d770e6585e5c8786392dd137a6c82ba9c55ab
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections