General

  • Target

    518758e620ffc1996e3d218b5b3bb2f3f3ab19c7ab203b13d1c851848c90740bN

  • Size

    229KB

  • MD5

    dc6b9a90ac65d5bc5064daae5b07a450

  • SHA1

    d4c4ea89aa218724dd83a57a4951bb614f9dadb7

  • SHA256

    518758e620ffc1996e3d218b5b3bb2f3f3ab19c7ab203b13d1c851848c90740b

  • SHA512

    cc40637423f6277934e4cdf29c0be8fad595d26fe4e03aa41b3c6c79190b969fc101455f0b22c846a8fd1fd413c2e0880ddbee67eba70ac6e5dd514a2c8e151d

  • SSDEEP

    6144:ETVqx7sWO1c2wqEQ2Hh271+HZ/pvkym/89bYEwPhCKvav:ETVqxQRc2wqEQ2I7AIfFfvav

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 518758e620ffc1996e3d218b5b3bb2f3f3ab19c7ab203b13d1c851848c90740bN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections