General

  • Target

    e1cff140e1f0d6a97fd921030105b210d9b9e15e81a514d5453dbe7c2eafce5bN

  • Size

    161KB

  • MD5

    ee7dd5d174873a85fa6ea75f67b93350

  • SHA1

    0421ecfeac137896d22d667f506bfccbb6cd78ba

  • SHA256

    e1cff140e1f0d6a97fd921030105b210d9b9e15e81a514d5453dbe7c2eafce5b

  • SHA512

    a1369e35207f55b3d3bf1e8551ab24aeb78dd416863107cdc161eb291707f8e7fc89c3c9920bc25e064f4194fbf48a59883c6b7b715aa0dc00dba70fffd7eec3

  • SSDEEP

    3072:G2r5M7IurhYWko7kkxVwtCJXeex7rrIRZK8K8/kv:Bru8vu7kkxVwtmeetrIyR

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e1cff140e1f0d6a97fd921030105b210d9b9e15e81a514d5453dbe7c2eafce5bN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections