General

  • Target

    bfe638614b4a64e5768bff48961a8783612c3959fa58586aac40bef21178b7d2

  • Size

    109KB

  • MD5

    bc19b9f144fb5b1e9c387be1303267e3

  • SHA1

    69e1427749a5208fb8a6c6ad17ae5bad20babd18

  • SHA256

    bfe638614b4a64e5768bff48961a8783612c3959fa58586aac40bef21178b7d2

  • SHA512

    0ee8f3e2dd9284a7ec4578968d22f15bc5e766dde6e9a097ea83ea2dfce544796f577918082de15046bf294afce58f7d7051b9752451d180b5b4a9d7b6241258

  • SSDEEP

    1536:4JUzJmTld+1UaFQAF4QmmkSjb+/J91LCqwzpQ6un1Dp5H02ljCVDeVqhCS5fR:mU+T+qjJ91LCqwzBu1DjHLMVDqqkSpR

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bfe638614b4a64e5768bff48961a8783612c3959fa58586aac40bef21178b7d2
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections