General
-
Target
42e4e956fbd833bc55720628dc0191c93514bbb166a364cf0e7dd497719f0a0dN
-
Size
664KB
-
Sample
241110-nnqfbawbqj
-
MD5
792061e3c3442880a4af8d62590ce3e0
-
SHA1
9afd94736614c049018ce32fbe1be1b635e6d1a6
-
SHA256
42e4e956fbd833bc55720628dc0191c93514bbb166a364cf0e7dd497719f0a0d
-
SHA512
e675280bc2e1ac26374b61af7ffbf6f40acb5a62dd650c4e48db1205a3c1e9c96922e056138e095c0de4e1d8b65b28d74acf99ba392dfc17dcd2ffa3dae9a752
-
SSDEEP
12288:/ZpV6yYP4rbpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYjmR54F:xW4XWleKWNUir2MhNl6zX3w9As/xO23U
Static task
static1
Behavioral task
behavioral1
Sample
42e4e956fbd833bc55720628dc0191c93514bbb166a364cf0e7dd497719f0a0dN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
42e4e956fbd833bc55720628dc0191c93514bbb166a364cf0e7dd497719f0a0dN.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://viruslist.com/wcmd.txt
http://viruslist.com/ppslog.php
http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
42e4e956fbd833bc55720628dc0191c93514bbb166a364cf0e7dd497719f0a0dN
-
Size
664KB
-
MD5
792061e3c3442880a4af8d62590ce3e0
-
SHA1
9afd94736614c049018ce32fbe1be1b635e6d1a6
-
SHA256
42e4e956fbd833bc55720628dc0191c93514bbb166a364cf0e7dd497719f0a0d
-
SHA512
e675280bc2e1ac26374b61af7ffbf6f40acb5a62dd650c4e48db1205a3c1e9c96922e056138e095c0de4e1d8b65b28d74acf99ba392dfc17dcd2ffa3dae9a752
-
SSDEEP
12288:/ZpV6yYP4rbpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYjmR54F:xW4XWleKWNUir2MhNl6zX3w9As/xO23U
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-