General
-
Target
b6655590ead2cef13744c510ac2deadaceaf052ce12ed861665a31577b9bf641
-
Size
121KB
-
Sample
241110-ceszasxark
-
MD5
f0ef16ddf44c0b5756ea7a2bd5e14b0b
-
SHA1
0d031ef85a25074104b949ab43b5334e2949d4e4
-
SHA256
b6655590ead2cef13744c510ac2deadaceaf052ce12ed861665a31577b9bf641
-
SHA512
f0a2afcaaddc0ce3990e682fea2ca68bef64fbaacacde4427675d87ee02fa574e946a7202aa9f57ce9eae6b4601b4822b2eb891d74a2fa8c4984d4deb540f2aa
-
SSDEEP
3072:hpVaHp5WddEkqeNjM6On3Cw7HcbHPeW/CyU5IO7AJnD5tvv:HYHvoseC3Cw7HmHj45IOarvv
Behavioral task
behavioral1
Sample
b6655590ead2cef13744c510ac2deadaceaf052ce12ed861665a31577b9bf641.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b6655590ead2cef13744c510ac2deadaceaf052ce12ed861665a31577b9bf641.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://f/wcmd.htm
http://f/ppslog.php
http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
b6655590ead2cef13744c510ac2deadaceaf052ce12ed861665a31577b9bf641
-
Size
121KB
-
MD5
f0ef16ddf44c0b5756ea7a2bd5e14b0b
-
SHA1
0d031ef85a25074104b949ab43b5334e2949d4e4
-
SHA256
b6655590ead2cef13744c510ac2deadaceaf052ce12ed861665a31577b9bf641
-
SHA512
f0a2afcaaddc0ce3990e682fea2ca68bef64fbaacacde4427675d87ee02fa574e946a7202aa9f57ce9eae6b4601b4822b2eb891d74a2fa8c4984d4deb540f2aa
-
SSDEEP
3072:hpVaHp5WddEkqeNjM6On3Cw7HcbHPeW/CyU5IO7AJnD5tvv:HYHvoseC3Cw7HmHj45IOarvv
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-