General

  • Target

    5581a0af7363d2beb86d493f426caba85401d1fac0e9ab82c5a56758a6621b66N

  • Size

    161KB

  • MD5

    e54b16f0d82ed5c41628a7419e080850

  • SHA1

    89c95c0d18fcb85755e1d2175858b1917048488e

  • SHA256

    5581a0af7363d2beb86d493f426caba85401d1fac0e9ab82c5a56758a6621b66

  • SHA512

    81c7f29acc811658b649fb9ef0c099da469b1345dec21055d1ed39f6f49eac801ccd6505954438b88f387fe6f2a5cfe10ccde66f128233ef9371154040298ce2

  • SSDEEP

    3072:PnDSulOHWnIqz4EdklVwtCJXeex7rrIRZK8K8/kv:rSynNZdklVwtmeetrIyR

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5581a0af7363d2beb86d493f426caba85401d1fac0e9ab82c5a56758a6621b66N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections