General

  • Target

    5162784f15b0c3ac1396016077a233d59040f655815a071f46fbb772b9e929d5N

  • Size

    128KB

  • MD5

    a9710b2bff8007a6471f73dea8311ea0

  • SHA1

    f22320e0dc238ac692119b3af67f9b90e2966a28

  • SHA256

    5162784f15b0c3ac1396016077a233d59040f655815a071f46fbb772b9e929d5

  • SHA512

    70a64c827bdec193b8801df4cc2e9cd3bcfaf50d74971c653cba29288f41ae65f72b86979305489823c4915b57efdb96303466cfc38d0a25861d4c618da44203

  • SSDEEP

    3072:UACe87eWaeiLMIEjuBnENnuhPXvmW2wS7IrHrYj:UA+7juBnJ/mHwMOHm

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5162784f15b0c3ac1396016077a233d59040f655815a071f46fbb772b9e929d5N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections