General

  • Target

    6a70b50e4a7d880241a17a681787fcab32444200d408d8cb2c6725d3bebe9536

  • Size

    109KB

  • MD5

    dd403b6040ecec5c4c565e871280caab

  • SHA1

    8dbbbb45f7369814d9b0419d301434ae94f01f0f

  • SHA256

    6a70b50e4a7d880241a17a681787fcab32444200d408d8cb2c6725d3bebe9536

  • SHA512

    2200f0e8d943f1779d8a7f92a70be8343fb91e57ae22fecb58feb7a3e98dc38fedab7bfaefe0ba18375d1166cd9173c3e93dae322ac237d401702aacba09767e

  • SSDEEP

    3072:s6nR0H8vdNOsITgCeBxhjJ9TLCqwzBu1DjHLMVDqqkSp:s6nRCwjOxTv6xVJ9/wtu1DjrFqh

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6a70b50e4a7d880241a17a681787fcab32444200d408d8cb2c6725d3bebe9536
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections