General

  • Target

    76f5d7e233ef346e49f7dd85fa1b762e903da6c623972670f6401480eb4b0fe8

  • Size

    123KB

  • MD5

    c2e8c769b718a67feb46f0b98f6f12a9

  • SHA1

    bac833afbb9612ef90a51d2d990a90c4f0199d46

  • SHA256

    76f5d7e233ef346e49f7dd85fa1b762e903da6c623972670f6401480eb4b0fe8

  • SHA512

    ab1d9d2a56fb2601cec0825d397e37fa80048a7a9e340993a14d05af9567476a5e883fafa41c1e6196612e7547da399f9726011ffded938f7d9beae206a10813

  • SSDEEP

    3072:M65NEOuWx+iWawPejol3/+N2JhRRYSa9rR85DEn5k7rRr:M1Odx+NPeEIN2zR4rQD85k/Rr

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 76f5d7e233ef346e49f7dd85fa1b762e903da6c623972670f6401480eb4b0fe8
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections