General
-
Target
37f79837a178f930b0b116fffa7e1e5a66806407d4af18c9423f384a52acb4a1N
-
Size
669KB
-
Sample
241110-qewl3szraj
-
MD5
de70576e1b8a16e25fbec2d1595d0670
-
SHA1
8d575300b47c6936b24ae831b9abe56dc3567aed
-
SHA256
37f79837a178f930b0b116fffa7e1e5a66806407d4af18c9423f384a52acb4a1
-
SHA512
6b961878d3af13146734bf05721eb623ca7959c48e3ad4eed1e4b1fe5616e86cadf00ef984fbfc82278cf2d844bd848318ce4e3675bb5aba8d6c07370f9306bb
-
SSDEEP
12288:kzdxeVoo8ukpeeV24ihMpQnqr+cI3a72LXrY6x46UbR/qYglMi:Jp6p5vihMpQnqrdX72LbY6x46uR/qYgL
Static task
static1
Behavioral task
behavioral1
Sample
37f79837a178f930b0b116fffa7e1e5a66806407d4af18c9423f384a52acb4a1N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
37f79837a178f930b0b116fffa7e1e5a66806407d4af18c9423f384a52acb4a1N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://f/wcmd.htm
http://f/ppslog.php
http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
37f79837a178f930b0b116fffa7e1e5a66806407d4af18c9423f384a52acb4a1N
-
Size
669KB
-
MD5
de70576e1b8a16e25fbec2d1595d0670
-
SHA1
8d575300b47c6936b24ae831b9abe56dc3567aed
-
SHA256
37f79837a178f930b0b116fffa7e1e5a66806407d4af18c9423f384a52acb4a1
-
SHA512
6b961878d3af13146734bf05721eb623ca7959c48e3ad4eed1e4b1fe5616e86cadf00ef984fbfc82278cf2d844bd848318ce4e3675bb5aba8d6c07370f9306bb
-
SSDEEP
12288:kzdxeVoo8ukpeeV24ihMpQnqr+cI3a72LXrY6x46UbR/qYglMi:Jp6p5vihMpQnqrdX72LbY6x46uR/qYgL
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-