General

  • Target

    638be404c519a5374a2608cead8c54b25f43d5a6fd47cea9df9212e01ad41009N

  • Size

    128KB

  • MD5

    6c64b5efe16df11965302545c521a9e0

  • SHA1

    4de2f9e89d7af7929523e27a2658f412942c55e1

  • SHA256

    638be404c519a5374a2608cead8c54b25f43d5a6fd47cea9df9212e01ad41009

  • SHA512

    b41d8ae9241a508ddce54a486168411d0cb317d20fafa50f747c277f373b865d6c661f8da1499e1e4888e20cace98f55bf331f234e66b9c36837ec78b6ea467c

  • SSDEEP

    3072:4q4/iWosp93Cfi7fsy4zDd1AZoUBW3FJeRuaWNXmgu+tB:kAs3xsy4ndWZHEFJ7aWN1B

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 638be404c519a5374a2608cead8c54b25f43d5a6fd47cea9df9212e01ad41009N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections