General

  • Target

    a6bb3dd9ee804fab92c75ee3f58166bee9ece8440504a7bd7fbab86c404db8dd

  • Size

    276KB

  • MD5

    b8868b07f49cd87745643f638b74df3c

  • SHA1

    4469d1757072c1c11aeb1dd053dd1217cdda04f5

  • SHA256

    a6bb3dd9ee804fab92c75ee3f58166bee9ece8440504a7bd7fbab86c404db8dd

  • SHA512

    635c321da513c1c9736eefb1338533ef8fea75ccc111e72cfbd2aaeaf677609b455de9f58e5c2fc25eb537b29b74b7dc5853d84b65305e10a74d86dca27a14ac

  • SSDEEP

    6144:nJQhlhlPcvdWZHEFJ7aWN1rtMsQBOSGaF+:nJAh22HEGWN1RMs1S7

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a6bb3dd9ee804fab92c75ee3f58166bee9ece8440504a7bd7fbab86c404db8dd
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections