General

  • Target

    80b8fbc8c9ad4dc9685f2d57239d62f5183c6785aa682b770880bc643650dd8a

  • Size

    192KB

  • MD5

    937002045d5a5034faa8eda468b5ab2f

  • SHA1

    8646072255c7133f5e423ae14c6a734700f08362

  • SHA256

    80b8fbc8c9ad4dc9685f2d57239d62f5183c6785aa682b770880bc643650dd8a

  • SHA512

    bf12c4174b6939ac5d516581823767f8d40be0797ca285402c4c6894c56977500f2b4ff72cb969b5fefd76077364c381e6c5ab4ce676a1722e7e5ac33a9a46c4

  • SSDEEP

    3072:m6PrExdMxTJSJ0j3rdlYVw3Py54eWfbDd1AZoUBW3FJeRuaWNXmgu+tAcrbFAJc7:m6PI8TsJO3rTTPy54eWffdWZHEFJ7aWp

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 80b8fbc8c9ad4dc9685f2d57239d62f5183c6785aa682b770880bc643650dd8a
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections