General

  • Target

    af10ee9b492c1aebebf541c1b15fa5aecb3a709f6d2f92f23898154bb797a4c4N

  • Size

    161KB

  • MD5

    b6d0476f90bc894bbc5a32bf019d5f70

  • SHA1

    b79f405832a65133acf9d50c8fbd2939074d15c9

  • SHA256

    af10ee9b492c1aebebf541c1b15fa5aecb3a709f6d2f92f23898154bb797a4c4

  • SHA512

    222f55ad4bc8b6d3aebcd2e5f330f36701e2dc3c77dd74710c62f2302572f27c16b3a30a404f5319a3f0069bcf52b9dd06b73da26f5132d1c91fc684c5d49af9

  • SSDEEP

    3072:K+6PHSKZPFzbS/keVwtCJXeex7rrIRZK8K8/kvV:EPzhe/keVwtmeetrIyRV

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • af10ee9b492c1aebebf541c1b15fa5aecb3a709f6d2f92f23898154bb797a4c4N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections