General

  • Target

    91079fcbbc62359f6330641f018a28a1835b93ba4f769b394edeb6852745ee6bN

  • Size

    161KB

  • MD5

    a1a94c4288f1e99cf2e6487c7fdaec10

  • SHA1

    781b0e91d99a6650ae0a1bb1fd3ded54722a7c26

  • SHA256

    91079fcbbc62359f6330641f018a28a1835b93ba4f769b394edeb6852745ee6b

  • SHA512

    eaf9a221ac58ce80ecde2240d8eec93fe805f841a7fcc692dfb7008c65cc9480db8f596c71814f55bb22e2b4b733dc10663e27494020ffb789c1f89cc11cef2f

  • SSDEEP

    3072:xmZXaDtnnKMEt3jdE4zt+ak4VwtCJXeex7rrIRZK8K8/kv:aXQEtTdZwak4VwtmeetrIyR

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 91079fcbbc62359f6330641f018a28a1835b93ba4f769b394edeb6852745ee6bN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections