Overview

overview

10

Static

static

10

a64d63a934...bN.exe

windows7-x64

10

a64d63a934...bN.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a64d63a93425bfe36a08c3875ac82367a350b9f79650719836bd7364344d414bN

  • Size

    112KB

  • MD5

    a62b950e163ec67d3064bfebcdbc8ff0

  • SHA1

    50e78ade29fd078e790367e538880876617af5a5

  • SHA256

    a64d63a93425bfe36a08c3875ac82367a350b9f79650719836bd7364344d414b

  • SHA512

    383d5dd0e6f023a98202da905319117fd8e1a5676c8a29c4003516c2502a6587952db97853b49c1e1fed828ad3b72b5cd5d0e9c797f743a006afabe85c60e0c2

  • SSDEEP

    3072:k2TxAzwXz2lb1wYHIFeJLCQnFIBOaCUjKaVLjd:xAzwXz2lb2YHIFeJLbnCBbC+nVLjd

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a64d63a93425bfe36a08c3875ac82367a350b9f79650719836bd7364344d414bN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections