Overview

overview

10

Static

static

10

6c4694004a...3N.exe

windows7-x64

10

6c4694004a...3N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c4694004a392e16cd6674ff7c7a7845f0636c01263005103335a75635a4a253N

  • Size

    138KB

  • MD5

    a9e9d28971c44bcabbf556ddb7625340

  • SHA1

    22e2f72eda55a04dc25eae05c0ade4c8dfc772a1

  • SHA256

    6c4694004a392e16cd6674ff7c7a7845f0636c01263005103335a75635a4a253

  • SHA512

    5b00e606eb0d927ffed93141c14ed55428834b3b34e57bc0ed62a8f71dd55caa2c4e30d1632cc781a93ba75c0e2ab74a439a9fd302784ade76e927cd1647548c

  • SSDEEP

    3072:1JO5v/Bd44i4EdWRR9b/FWZZXymW2wS7IrHrY8pjq6:LqvD44i4gWRR9b/IimHwMOH/Vz

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c4694004a392e16cd6674ff7c7a7845f0636c01263005103335a75635a4a253N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections