General

  • Target

    e601e458f3097ba72701c43942995c7987e77f7f10d57f2afb853a0fdb751013N

  • Size

    123KB

  • MD5

    fe161d2a2ba1a04d323327af06396060

  • SHA1

    f67d63aecd5d9ed0ec530320bba8ce2bbe29b1c2

  • SHA256

    e601e458f3097ba72701c43942995c7987e77f7f10d57f2afb853a0fdb751013

  • SHA512

    af1dc2fdd17e51da9eaa4cdffa8af279b5ac07df1ae700531e1258d38fd8a1f1851a90aa98fc20771bd0feb32e3c1371f4817a28de143933cfa7484356c69fad

  • SSDEEP

    3072:EpjW3Knpyd+N/o2fX4RYSa9rR85DEn5k7rRr:GK3P+N/o2f44rQD85k/Rr

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e601e458f3097ba72701c43942995c7987e77f7f10d57f2afb853a0fdb751013N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections