General

  • Target

    788f5e8cb28915db125f507d218242dbd9c3d7de836d5e307ed9ab19ceef76e0

  • Size

    256KB

  • MD5

    61b446326f9c3ed8a8023a37cb9ae931

  • SHA1

    7a71f5c79d4ef873cd9a4aa264e1eeccb909b809

  • SHA256

    788f5e8cb28915db125f507d218242dbd9c3d7de836d5e307ed9ab19ceef76e0

  • SHA512

    18651952a4108d8c3092b884baec86c88fc625299dc42f74651d0cfff7248129abbc2afcb5995316d60dff71fa08ff560f812a3e93465718f9b1807b809d7d09

  • SSDEEP

    3072:AvUheV6HqOWZLkRhlzgH9el+cjDd1AZoUBW3FJeRuaWNXmgu+tAcrbFAJc+RsUiP:CGow6Dc3dWZHEFJ7aWN1rtMsQBOSGa

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 788f5e8cb28915db125f507d218242dbd9c3d7de836d5e307ed9ab19ceef76e0
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections