General
-
Target
d253e7cef86fa0969a5b64315dbdaad16de0c88702d9921172f8e3598ae5d099N
-
Size
347KB
-
Sample
241109-s8h9ysznfp
-
MD5
d443e18008d3b09794fdc3d0ec4c4330
-
SHA1
227ee45b0ed0b6a2d560c0343720d50a3da84989
-
SHA256
d253e7cef86fa0969a5b64315dbdaad16de0c88702d9921172f8e3598ae5d099
-
SHA512
5e178a23b29519994c33d147bd656e8048497f0d7e45d841d454c3e8c21d2de0e2af3e3a0b3b717ffccec35e34bbf40afde54ddb727244fe2be651960bac808c
-
SSDEEP
6144:0ziNG9BB0t5fx4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:0iGtAx4brRGFB24lwR45FB24lEk
Static task
static1
Behavioral task
behavioral1
Sample
d253e7cef86fa0969a5b64315dbdaad16de0c88702d9921172f8e3598ae5d099N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d253e7cef86fa0969a5b64315dbdaad16de0c88702d9921172f8e3598ae5d099N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://viruslist.com/wcmd.txt
http://viruslist.com/ppslog.php
http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
d253e7cef86fa0969a5b64315dbdaad16de0c88702d9921172f8e3598ae5d099N
-
Size
347KB
-
MD5
d443e18008d3b09794fdc3d0ec4c4330
-
SHA1
227ee45b0ed0b6a2d560c0343720d50a3da84989
-
SHA256
d253e7cef86fa0969a5b64315dbdaad16de0c88702d9921172f8e3598ae5d099
-
SHA512
5e178a23b29519994c33d147bd656e8048497f0d7e45d841d454c3e8c21d2de0e2af3e3a0b3b717ffccec35e34bbf40afde54ddb727244fe2be651960bac808c
-
SSDEEP
6144:0ziNG9BB0t5fx4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:0iGtAx4brRGFB24lwR45FB24lEk
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-