General
-
Target
8585dda9d9697a03f3de85e9747d7d18ec9c422d9db9ef7dab45081d1dc445cdN.exe
-
Size
128KB
-
Sample
241113-xarwnaxdrm
-
MD5
bea79b7769710c99de1655247dce7470
-
SHA1
e6eee5d2d8abd55706343f060461bb4369340387
-
SHA256
8585dda9d9697a03f3de85e9747d7d18ec9c422d9db9ef7dab45081d1dc445cd
-
SHA512
ea2209bb460672e642f20a276846ef439a4c957154351e40b9aa3801f2fdeb73a138ecf4b0fc9a0c51c46c24d638f8851cbe7974be4e0c9e8630a9536e7b7c7a
-
SSDEEP
1536:S4/9S5KuorMRU/y8BTxOij2fVT7x0Vgm77c/mWs3KxRQDfRfRa9HprmRfRJCLIXG:7/8kHrMR4oijQRmnc/mWleDf5wkpHxG
Static task
static1
Behavioral task
behavioral1
Sample
8585dda9d9697a03f3de85e9747d7d18ec9c422d9db9ef7dab45081d1dc445cdN.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
8585dda9d9697a03f3de85e9747d7d18ec9c422d9db9ef7dab45081d1dc445cdN.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
berbew
http://viruslist.com/wcmd.txt
http://viruslist.com/ppslog.php
http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d
Targets
-
-
Target
8585dda9d9697a03f3de85e9747d7d18ec9c422d9db9ef7dab45081d1dc445cdN.exe
-
Size
128KB
-
MD5
bea79b7769710c99de1655247dce7470
-
SHA1
e6eee5d2d8abd55706343f060461bb4369340387
-
SHA256
8585dda9d9697a03f3de85e9747d7d18ec9c422d9db9ef7dab45081d1dc445cd
-
SHA512
ea2209bb460672e642f20a276846ef439a4c957154351e40b9aa3801f2fdeb73a138ecf4b0fc9a0c51c46c24d638f8851cbe7974be4e0c9e8630a9536e7b7c7a
-
SSDEEP
1536:S4/9S5KuorMRU/y8BTxOij2fVT7x0Vgm77c/mWs3KxRQDfRfRa9HprmRfRJCLIXG:7/8kHrMR4oijQRmnc/mWleDf5wkpHxG
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Berbew family
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-