General
-
Target
467825888058d9d0b91497c5d6bf90bfaa677a7675e6cca9a1eb44b4f1492d89N
-
Size
89KB
-
Sample
241109-m8cvaatblq
-
MD5
a6bc9889ef613dc5cfe1f4b1c6cc56f0
-
SHA1
303dc4875f8e8399a5d97634c0ba79c5f29a6938
-
SHA256
467825888058d9d0b91497c5d6bf90bfaa677a7675e6cca9a1eb44b4f1492d89
-
SHA512
9df0d5cde6f27a3f4fd3b414cf425d5f0fb3f86fa6aeb47df01a575778f057d5dc445bdfe4dfed515c5822c35f96ab5e89273a47e2ae47714b763178dfcd0014
-
SSDEEP
1536:U+ZwdTjEaUbcyXoMPeR+Kiq0WYCdz8ZdG/MXPUhVGHmZYQjDs4RQMR+KRFR3RzRm:U+WnUboJiq0KdIZY/4UrDbeMjb5ZXUf5
Static task
static1
Behavioral task
behavioral1
Sample
467825888058d9d0b91497c5d6bf90bfaa677a7675e6cca9a1eb44b4f1492d89N.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
467825888058d9d0b91497c5d6bf90bfaa677a7675e6cca9a1eb44b4f1492d89N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://viruslist.com/wcmd.txt
http://viruslist.com/ppslog.php
http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
467825888058d9d0b91497c5d6bf90bfaa677a7675e6cca9a1eb44b4f1492d89N
-
Size
89KB
-
MD5
a6bc9889ef613dc5cfe1f4b1c6cc56f0
-
SHA1
303dc4875f8e8399a5d97634c0ba79c5f29a6938
-
SHA256
467825888058d9d0b91497c5d6bf90bfaa677a7675e6cca9a1eb44b4f1492d89
-
SHA512
9df0d5cde6f27a3f4fd3b414cf425d5f0fb3f86fa6aeb47df01a575778f057d5dc445bdfe4dfed515c5822c35f96ab5e89273a47e2ae47714b763178dfcd0014
-
SSDEEP
1536:U+ZwdTjEaUbcyXoMPeR+Kiq0WYCdz8ZdG/MXPUhVGHmZYQjDs4RQMR+KRFR3RzRm:U+WnUboJiq0KdIZY/4UrDbeMjb5ZXUf5
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-