General
-
Target
74c961b17b3c10d53d496a850766eddc299877a6094266e116e439f63035a1baN
-
Size
264KB
-
Sample
241107-hpdv1syaql
-
MD5
8c0730b91a016b83e7fca5aab0b15cf0
-
SHA1
ed5f211b2a360ec47cc5104bac7306414e5bcea3
-
SHA256
74c961b17b3c10d53d496a850766eddc299877a6094266e116e439f63035a1ba
-
SHA512
ef550e0ef4b6dfb3069d9e1d2c8d7d2ac310b9e4da28470eb923e0c6676175f358bdfe0b8be424db725bb785ba5e96d229ef61a9052eb36f6ea93ee936256144
-
SSDEEP
6144:0Quv8Tuf4CFqXW1IrCdbiqd434QOtXW1IrCdbiqd:3Y4CEXprED4dKXprED
Behavioral task
behavioral1
Sample
74c961b17b3c10d53d496a850766eddc299877a6094266e116e439f63035a1baN.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
74c961b17b3c10d53d496a850766eddc299877a6094266e116e439f63035a1baN.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://viruslist.com/wcmd.txt
http://viruslist.com/ppslog.php
http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
74c961b17b3c10d53d496a850766eddc299877a6094266e116e439f63035a1baN
-
Size
264KB
-
MD5
8c0730b91a016b83e7fca5aab0b15cf0
-
SHA1
ed5f211b2a360ec47cc5104bac7306414e5bcea3
-
SHA256
74c961b17b3c10d53d496a850766eddc299877a6094266e116e439f63035a1ba
-
SHA512
ef550e0ef4b6dfb3069d9e1d2c8d7d2ac310b9e4da28470eb923e0c6676175f358bdfe0b8be424db725bb785ba5e96d229ef61a9052eb36f6ea93ee936256144
-
SSDEEP
6144:0Quv8Tuf4CFqXW1IrCdbiqd434QOtXW1IrCdbiqd:3Y4CEXprED4dKXprED
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-