General

  • Target

    3f8c63bc8ed939cbeea77fd945d720b97e9518e3b68e85d50720fe21903bd7beN

  • Size

    229KB

  • MD5

    e6b62214a198fc4e672d7001162e8dc0

  • SHA1

    9045309a898e1330401f5d5f0513ef6781d04343

  • SHA256

    3f8c63bc8ed939cbeea77fd945d720b97e9518e3b68e85d50720fe21903bd7be

  • SHA512

    7a68ae4d4beea943035ddbce3383042aa795f3cdadc5e4d8d9b6f3fd2b22f4ec2d5ecdc1c90c198da6f562ee732a763d9ea8d050ecee151998153ef2530cb820

  • SSDEEP

    6144:11HALwHk0271+HZ/pvkym/89bYEwPhCKvav:11HAcS7AIfFfvav

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3f8c63bc8ed939cbeea77fd945d720b97e9518e3b68e85d50720fe21903bd7beN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections