General

  • Target

    e768d6f6140ea8b5d781b02c93b699323ad98d850e1455915291de238e140cd5N

  • Size

    161KB

  • MD5

    f8bc2609f1de582bf296ca2f299367e0

  • SHA1

    c1c2c30e405c3473a37c30c9476ac1b31f217fc7

  • SHA256

    e768d6f6140ea8b5d781b02c93b699323ad98d850e1455915291de238e140cd5

  • SHA512

    84711bb3c17da30795bdcd85052d87ea59497d81f2065b25d17a3575213a102f64417673ef251bc7334f896fa2324888932d9221d291ead2c4907f59bad520db

  • SSDEEP

    3072:qYy7u4qa2WsWv+oUUfAn81NyxUvYtyUwrtk4VwtCJXeex7rrIRZK8K8/kvV:c5EPkUw5k4VwtmeetrIyRV

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e768d6f6140ea8b5d781b02c93b699323ad98d850e1455915291de238e140cd5N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections