General

  • Target

    1d8d229498adc509ebaaf4721e8cd69e53eb5f704ac88ce5685c8401d62e8b52N.exe

  • Size

    285KB

  • MD5

    3df45f886b04f10259e409556afacf30

  • SHA1

    ad923d128db194dfe2899d8b209a978c078f3296

  • SHA256

    1d8d229498adc509ebaaf4721e8cd69e53eb5f704ac88ce5685c8401d62e8b52

  • SHA512

    adc81df19362eb1207d290927ccc5dbb3be4b58c2f0d663b972757fafc5e0f26397f09c0ef3cbe411edaa1112803afbcbe39be6718e26f5ae0f4111cdead0778

  • SSDEEP

    3072:o7EAP9WoYZSXwuVw86e+KVcbMloVRr3uMg0kAqSxYiJ2QM4GKch:/uH1XlhR+KQIoi7tWa

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d8d229498adc509ebaaf4721e8cd69e53eb5f704ac88ce5685c8401d62e8b52N.exe
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections