Overview

overview

10

Static

static

10

dfa39f5568...db.exe

windows7-x64

10

dfa39f5568...db.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dfa39f5568b84a573630b45b4504c554e18113381b4b3f09478b1a701c187fdb

  • Size

    161KB

  • MD5

    ca48534dc8f049b798bb1f5664855107

  • SHA1

    f2adda86ecca032df8aad69c7a0517fd24545368

  • SHA256

    dfa39f5568b84a573630b45b4504c554e18113381b4b3f09478b1a701c187fdb

  • SHA512

    92419f8895571eb31b4177d8a140ba6e15f0f56033f8290c8d8bd5ad4b8015ef339fb0f341114a55144d85b60b0903ea39aeaefdf8e589af7624052f87cffc58

  • SSDEEP

    3072:eS1AzXKozLOIqzc7cekNVwtCJXeex7rrIRZK8K8/kvN:eS1Az16t4kNVwtmeetrIyRN

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dfa39f5568b84a573630b45b4504c554e18113381b4b3f09478b1a701c187fdb
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections