Overview

overview

10

Static

static

10

ef142f6392...bN.exe

windows7-x64

10

ef142f6392...bN.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ef142f63928d1bfb720d259711a106036f09bd353f64eef177916c9f1cf64fabN

  • Size

    144KB

  • MD5

    94ba498b9216d08a927aaa17850d4620

  • SHA1

    c00d65b0546d5c406a28af6773ab37df82a227df

  • SHA256

    ef142f63928d1bfb720d259711a106036f09bd353f64eef177916c9f1cf64fab

  • SHA512

    3ec51b977a0b6137158b9322f9a704665784d09abb47cb2cefe603cd783d9fca1a5c942ab8007fc99312c25248865698d2c63a94569eaf284761e4920b0f3500

  • SSDEEP

    3072:8+w/Fr3yx1wWWws33kremwc/gHq/Wp+YmKfxgQd:8+mFr3yxnWV33/fc/UmKyI

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef142f63928d1bfb720d259711a106036f09bd353f64eef177916c9f1cf64fabN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections