General

  • Target

    2622faa63e71590cf8e11224195eeee882b20c513dd6368e1492d1a1dfec4d82N

  • Size

    229KB

  • MD5

    2515753a12dbb099c2900f4ddc13df60

  • SHA1

    e3ae6479a88ffc912e7937f522510ec771cf6be5

  • SHA256

    2622faa63e71590cf8e11224195eeee882b20c513dd6368e1492d1a1dfec4d82

  • SHA512

    b474f6cd10be18724fe82a2dfb8b95d52587c615b4b0f5e13897fa3d606e2a682e60be54cdef8e041a9e914e40f13c75ded8608e7743f96f7675e8611ab666f4

  • SSDEEP

    6144:WshZuIJSCnuX271+HZ/pvkym/89bYEwPhCKvav:phZrnb7AIfFfvav

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2622faa63e71590cf8e11224195eeee882b20c513dd6368e1492d1a1dfec4d82N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections