General

  • Target

    ef6b78f373a3fc5d77fc31259bcbae43bb31a5a4e4d108c6c212dc060a33c676N

  • Size

    138KB

  • MD5

    b358f92e6d211187955785d05a58c190

  • SHA1

    a26f2bab62ebb79de36f9bf0916c8096078ee3e1

  • SHA256

    ef6b78f373a3fc5d77fc31259bcbae43bb31a5a4e4d108c6c212dc060a33c676

  • SHA512

    ea7c5745fbb86d41bf777e39f8bde76e010814baebcfda34582e9f69164230b42c026f9bffb765f89c510f21645c7345f77cb3903919f502966a9cfaa8d19c48

  • SSDEEP

    3072:CQkZ8tsgtZe39dW50x1jcGX/XemW2wS7IrHrY8pjq6:CxZ8HjSxyAumHwMOH/Vz

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef6b78f373a3fc5d77fc31259bcbae43bb31a5a4e4d108c6c212dc060a33c676N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections