General

  • Target

    704b675e59ce291375e41c688db7a8b0fd86985e7c485f593ae494ee219e2553N

  • Size

    128KB

  • MD5

    a275d6104613ea30283cbb10f8e2edd0

  • SHA1

    83b9482187270448bf78ff54559817d0b3d1d96d

  • SHA256

    704b675e59ce291375e41c688db7a8b0fd86985e7c485f593ae494ee219e2553

  • SHA512

    c8a7268608d693e32e2f5d7c47f37b27863a1992e46381c60f940c351b58a29843d55357a161d5a3e3524bcb4efbdac059391635066a788b1709c60b6ba68173

  • SSDEEP

    3072:OusUmcJTBmlJB7BxS2XvOTbwf1nFzwSAJB8g:pMeBmlFxSGvOg1n6xJmg

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 704b675e59ce291375e41c688db7a8b0fd86985e7c485f593ae494ee219e2553N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections