General

  • Target

    5ba39b984de4f5a9d6e3caa8b4dbeef118abfe3e6b684216703d3763f80d6edeN

  • Size

    123KB

  • MD5

    957aabe9c968c4e8d8e0c6ba1cb71900

  • SHA1

    8f273211aadff6f1e882556f1458f67d86d11ec9

  • SHA256

    5ba39b984de4f5a9d6e3caa8b4dbeef118abfe3e6b684216703d3763f80d6ede

  • SHA512

    c0851fd3cdcdacd6e4c0abc2a88e028cd550569bdbe7a4316d2a0c4db96d9f94f4c74913e2f9c732788ddce76f6e12b3ddeb63629fd17b009cd196356097c024

  • SSDEEP

    3072:v16UddXXW9HAhfxZPqRfSRYSa9rR85DEn5k7r8:v16W5sH+xpCfS4rQD85k/8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ba39b984de4f5a9d6e3caa8b4dbeef118abfe3e6b684216703d3763f80d6edeN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections