General
-
Target
8ca43b63ec80f84a8f7cc5454a9bf62766110e8d17aa5cb9d3d354dc3ca966a7N
-
Size
76KB
-
Sample
241109-nxh3lateqp
-
MD5
a3c087fa115a74e9ba90c92dd24da180
-
SHA1
b5f79192519880329e1cd91aa40cbeb66ffba67f
-
SHA256
8ca43b63ec80f84a8f7cc5454a9bf62766110e8d17aa5cb9d3d354dc3ca966a7
-
SHA512
409eb8636e239f5d82ba870ac38e7e79489181687f10413dc06660c5266e78a6c51cc54e4d2686acf39e6dab68b8898ff3b48b25557892f0f90d4818ae6ed187
-
SSDEEP
768:F+Sg3m1N82e41DiPBcDqWOjyw+8StUdracIWChN6JrqKZQWVtKE05dFJ7a409L8e:FpgsfkcDqWmyl+dKthor7Q7bR9OqfOL
Static task
static1
Behavioral task
behavioral1
Sample
8ca43b63ec80f84a8f7cc5454a9bf62766110e8d17aa5cb9d3d354dc3ca966a7N.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
8ca43b63ec80f84a8f7cc5454a9bf62766110e8d17aa5cb9d3d354dc3ca966a7N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://f/wcmd.htm
http://f/ppslog.php
http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
8ca43b63ec80f84a8f7cc5454a9bf62766110e8d17aa5cb9d3d354dc3ca966a7N
-
Size
76KB
-
MD5
a3c087fa115a74e9ba90c92dd24da180
-
SHA1
b5f79192519880329e1cd91aa40cbeb66ffba67f
-
SHA256
8ca43b63ec80f84a8f7cc5454a9bf62766110e8d17aa5cb9d3d354dc3ca966a7
-
SHA512
409eb8636e239f5d82ba870ac38e7e79489181687f10413dc06660c5266e78a6c51cc54e4d2686acf39e6dab68b8898ff3b48b25557892f0f90d4818ae6ed187
-
SSDEEP
768:F+Sg3m1N82e41DiPBcDqWOjyw+8StUdracIWChN6JrqKZQWVtKE05dFJ7a409L8e:FpgsfkcDqWmyl+dKthor7Q7bR9OqfOL
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-