General

  • Target

    16fa34ed50dc5c1fce47dfe9490ca5c9252ae470dec62dadbd67f7da29edfde1N

  • Size

    128KB

  • MD5

    b3253b3c3e07e016325c92f8325e6f60

  • SHA1

    ba71ed3c22bfd2988b2953f70c8cff45a119e044

  • SHA256

    16fa34ed50dc5c1fce47dfe9490ca5c9252ae470dec62dadbd67f7da29edfde1

  • SHA512

    e7895451c53ee908b3c9c3c44e181d8da763e57e8ca228f43a149d37c0eb31cd092c30a6f7ac8fa067c789bfb08d8c78cedb28557e9bfb8f60fc3c878fcade02

  • SSDEEP

    3072:vsw3KapqZjUJiKvncUKde3lj9pui6yYPaI7DehizrVtN:9KagKvnrKgnpui6yYPaIGc

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 16fa34ed50dc5c1fce47dfe9490ca5c9252ae470dec62dadbd67f7da29edfde1N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections