General

  • Target

    b28572be2ebef244a892bd81a7e25814f00988503bd150cf6e678d64866c99cdN

  • Size

    128KB

  • MD5

    e1406fc24dce91238192abecad4314f0

  • SHA1

    88f47339924b420cb52b572090c00e378c8ea717

  • SHA256

    b28572be2ebef244a892bd81a7e25814f00988503bd150cf6e678d64866c99cd

  • SHA512

    239495c2bce492dd7efcb6e395327f1f21198455b7721ecf431c105a92d49718f1d8fb7f2a03a973ccada7ad05dd3e9adf27d1fad89aeeb27b81589b7917e59b

  • SSDEEP

    3072:jeN+hk7xSKMc3Am+m1OfHSZIPn0Dbwf1nFzwSAJB8g:jsB7xF/pMyZIPnH1n6xJmg

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b28572be2ebef244a892bd81a7e25814f00988503bd150cf6e678d64866c99cdN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections