General

  • Target

    c6a73717008db03f09a6ef5ba84508ae8ec849c7cb29942c99391dd401a53a36N

  • Size

    144KB

  • MD5

    6430b402ed36acab993040d441844a80

  • SHA1

    d8264743e7ca796cc79d98671882f7c07d52cbae

  • SHA256

    c6a73717008db03f09a6ef5ba84508ae8ec849c7cb29942c99391dd401a53a36

  • SHA512

    f36d21c2c0d87e67228aecee100e3d72860f04e35038c9588dd57cedf27030cdf3a22f6d32aa1709673b74d9e0a1bb9183e54dd2c6433c862685b12f8a2c1ac0

  • SSDEEP

    3072:0Ou31Qmjl7sDtD6kxjgi2gb3a3+X13XRzrgHq/Wp+YmKfxgQL:0OgsRzxMiv7aOl3BzrUmKy0

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c6a73717008db03f09a6ef5ba84508ae8ec849c7cb29942c99391dd401a53a36N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections