General

  • Target

    b82a31c4263e1ea8d856653cd3431a720fda47d2dbc9d8e0bd6209cc3d58b178N

  • Size

    161KB

  • MD5

    e517da071f18fe93672a1a93ccc3fc20

  • SHA1

    811d731ade3b0d1e37e4f74681122a7d39f1693d

  • SHA256

    b82a31c4263e1ea8d856653cd3431a720fda47d2dbc9d8e0bd6209cc3d58b178

  • SHA512

    72b517b2d195897a6d7061f6e368a83623a85024407f40d80ecb6f5a139c1866883b6c033911205bd5af049198a7c21f5f10e0e9beadf76f15e2b5f0e3b14ed4

  • SSDEEP

    3072:n3x+ixqBXil4OFWooZknVwtCJXeex7rrIRZK8K8/kvV:3x+46yl53QknVwtmeetrIyRV

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b82a31c4263e1ea8d856653cd3431a720fda47d2dbc9d8e0bd6209cc3d58b178N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections