General

  • Target

    4117e8ff1f7a34db60bd8671d2df929269ba58a892e09a8d872e5c1caff09a4eN

  • Size

    128KB

  • MD5

    f7b3641e40ea848b84aaf636080e2560

  • SHA1

    4f859734ece9c4ab3b097a28a1ad950fa40958f1

  • SHA256

    4117e8ff1f7a34db60bd8671d2df929269ba58a892e09a8d872e5c1caff09a4e

  • SHA512

    d46ad440df9683aad8562b72df22dedeb1954e1247213b6467b69168f651cc81ea441d4a55bb73f52fb1f25383802ddb8d791332b7d18b564a235edb2bf20d23

  • SSDEEP

    3072:LEerSKgEYkmfaSo5JWBYlDfygDd1AZoUBW3FJeRuaWNXmgu+tB:AmYfa86yqdWZHEFJ7aWN1B

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4117e8ff1f7a34db60bd8671d2df929269ba58a892e09a8d872e5c1caff09a4eN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections