General

  • Target

    8fec59b72a0e2d0dc6afca776d9059b26a42f726b0185f2b28d5949e7254b7daN

  • Size

    144KB

  • MD5

    5513f45506bfdeb46896e2316b695550

  • SHA1

    f0f572d37165b2a4231b072dccfecb1cc8b6c390

  • SHA256

    8fec59b72a0e2d0dc6afca776d9059b26a42f726b0185f2b28d5949e7254b7da

  • SHA512

    22e72908f2464e2200a276ad9b3b0f56a6f8bd84ada92537be5c58d1b6022f5dfe58e1013c7c3ba1f0fbeab0e5b09f93336ededc21eb20e5ec974d7a9ab0ef9f

  • SSDEEP

    3072:bYS1bAmgJzQfEC2K90BKgFgHq/Wp+YmKfxgQdxvq:l5AtQa0gFUmKyIxi

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8fec59b72a0e2d0dc6afca776d9059b26a42f726b0185f2b28d5949e7254b7daN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections