General

  • Target

    b9fbac119e87de04ed488800abf9bf0e1679237be2f11a1fb6337742cc0ee795N

  • Size

    128KB

  • MD5

    e3fe54cedb649945daffd9fa228921c0

  • SHA1

    19f09abf169175afaff4f872df6bcfea3cffcf2b

  • SHA256

    b9fbac119e87de04ed488800abf9bf0e1679237be2f11a1fb6337742cc0ee795

  • SHA512

    e6da3d6024dfb393a13fa2e0036a6acaf9f4554ef23ca28643658d9404f04a021c1b145cdb29cdb6bade19a9c4ea67a2c8fcbe54594bf52e0b662f9c142a0c6f

  • SSDEEP

    3072:BaAStvVi1c5grx85gKXyyzp08uFafmHURHAVgnvedh6:rSlOrrxIgKi+p08uF8YU8gnve7

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b9fbac119e87de04ed488800abf9bf0e1679237be2f11a1fb6337742cc0ee795N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections