General
-
Target
361514a545708e73446ae8835ac37af659e0aff3f71899ef66aa914940dfabdcN
-
Size
1.5MB
-
Sample
241109-j4tqfszngx
-
MD5
66d24b6090682f35206908dc3817eba0
-
SHA1
fd5bb7878d1679f778ae8ad4c304b7182b3d6686
-
SHA256
361514a545708e73446ae8835ac37af659e0aff3f71899ef66aa914940dfabdc
-
SHA512
795fa60429fdce134e98be3b37027aec475877d6d83e90b53aada40875604e51ae18474ae202b5fcc4113651cfdfcd023bb29b0963825e17578d9936b2d6ceee
-
SSDEEP
24576:p8GT4Ph2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oWtec+fwv4cXce:ObazR0vKLXZnec+Yv4cXcy6l6mFndw2m
Static task
static1
Behavioral task
behavioral1
Sample
361514a545708e73446ae8835ac37af659e0aff3f71899ef66aa914940dfabdcN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
361514a545708e73446ae8835ac37af659e0aff3f71899ef66aa914940dfabdcN.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://f/wcmd.htm
http://f/ppslog.php
http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
361514a545708e73446ae8835ac37af659e0aff3f71899ef66aa914940dfabdcN
-
Size
1.5MB
-
MD5
66d24b6090682f35206908dc3817eba0
-
SHA1
fd5bb7878d1679f778ae8ad4c304b7182b3d6686
-
SHA256
361514a545708e73446ae8835ac37af659e0aff3f71899ef66aa914940dfabdc
-
SHA512
795fa60429fdce134e98be3b37027aec475877d6d83e90b53aada40875604e51ae18474ae202b5fcc4113651cfdfcd023bb29b0963825e17578d9936b2d6ceee
-
SSDEEP
24576:p8GT4Ph2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oWtec+fwv4cXce:ObazR0vKLXZnec+Yv4cXcy6l6mFndw2m
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-