General

  • Target

    f710b44d2b31e068a45f988f6b3ee97db35d771b2de9f91452c0886affc4d754N

  • Size

    144KB

  • MD5

    f6a1aa31b83b8826aba69e6bb79ba0d0

  • SHA1

    2a35b327b67a4a34d762f17f23cade126799903a

  • SHA256

    f710b44d2b31e068a45f988f6b3ee97db35d771b2de9f91452c0886affc4d754

  • SHA512

    97d078b75df22d797790b5716b7b68fe2b8bdd7e54abdc494ed9303e3f3de3db81060b5b5db7a4dbd48265dbbc6d757304e57304166b56176c8e4fea77750da7

  • SSDEEP

    3072:U1QbTiEnQaczmwgugHq/Wp+YmKfxgQdxvq:NTidmwguUmKyIxi

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f710b44d2b31e068a45f988f6b3ee97db35d771b2de9f91452c0886affc4d754N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections