General

  • Target

    7945a37380acbc063be65a48784a4742c701129998ac03b1297060ac628d2c66

  • Size

    161KB

  • MD5

    8ec61752e9d219d5722c7560869ead30

  • SHA1

    251a93feb555d26b4c15a782bac5a840157e615a

  • SHA256

    7945a37380acbc063be65a48784a4742c701129998ac03b1297060ac628d2c66

  • SHA512

    47944a6864eb44e1b7cb91129a9d9597ffa1c2abe84f968fd35fcc129fdbec1d56c4b1bfa0da8ebaf9778e8edea1117d8e1ba5178c11e7d9a84bba6bcc6d318f

  • SSDEEP

    3072:2Dj/Mns8ZXVHrQDjdSDUSuIUknVwtCJXeex7rrIRZK8K8/kvN:VsAVstSDUYUknVwtmeetrIyRN

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7945a37380acbc063be65a48784a4742c701129998ac03b1297060ac628d2c66
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections