General

  • Target

    295f503b68c2dc9e6d7c22487201944dbf8cee35fba63266b501a078b67edf32N

  • Size

    110KB

  • MD5

    e1fe3a8b0a053afc6d4fe56f3f389850

  • SHA1

    f63115a01d56e3974fb20ffbb3f838398c00a6bf

  • SHA256

    295f503b68c2dc9e6d7c22487201944dbf8cee35fba63266b501a078b67edf32

  • SHA512

    515cf192828742a0093af3a596b07dfd59fe455e2f8f6de7aa96c2302dc6795bdb703478f84aed7ef17926c7d5402216624aa56b2abe25d0eff6caabe288f713

  • SSDEEP

    1536:csXXOznQUHdG8ti4mPitMjCk0jYvvryA5I5mZQMYCAzNsUSTcTVB9t8BciDM8VqW:DOzn/HnQEFj+B5FM5FTLJiXSk6IXP

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 295f503b68c2dc9e6d7c22487201944dbf8cee35fba63266b501a078b67edf32N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections