General

  • Target

    39f0d984c9873c879ec8c9f435ca969b5874e0d519a52eb49de1753b5d6f4d40

  • Size

    128KB

  • MD5

    de77693fc0881cdeb2e0b9b3640fc3ff

  • SHA1

    f0187937c6e9ada2654db8960eee33ac78cfdc76

  • SHA256

    39f0d984c9873c879ec8c9f435ca969b5874e0d519a52eb49de1753b5d6f4d40

  • SHA512

    997e600be233bd1cfb564a84e673a200665739a2ba9bc490fa9ff46c5252f2fe3e18bcb213e16b5b653af2f78e9c7c801c2abebbdb1c9b29c05e5b7366dd41f5

  • SSDEEP

    3072:2czzd7X/5VgkN5M4ya5Y3kremwc/gHq/Wp+YmKfxgC:n5PgkN5MHa5Y3/fc/UmKyC

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 39f0d984c9873c879ec8c9f435ca969b5874e0d519a52eb49de1753b5d6f4d40
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections