General

  • Target

    78ff71d343b0b9406749219064587264ad6fa065604582c7be44e3dea6b29631

  • Size

    128KB

  • MD5

    e4791531f2c53b36cdc919098e4bef80

  • SHA1

    f0ea45b2391b6f1ee091e202e66fbf66249b0e12

  • SHA256

    78ff71d343b0b9406749219064587264ad6fa065604582c7be44e3dea6b29631

  • SHA512

    399bb2c2ace8f76fbfd7345dfb7d9b482dd833874294240a5b1f2912cce76145c09906917e607bdb18d8d6e5b3de3cdceb97e87ccc43638f037f2369f7b9b343

  • SSDEEP

    1536:FK3LO2z6BdVW8Z0yKkplF8rXPYqlevOETDYoLs2bwZG9o1nFzz3yjCQRawEDAJB5:F+S2oiYWDPwvBo2bwf1nFzwSAJB8g

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 78ff71d343b0b9406749219064587264ad6fa065604582c7be44e3dea6b29631
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections