General

  • Target

    fb1c2c8af37643fbbaabeef32b82d3267852144d5b7d0f510c85814fee8f2860N

  • Size

    112KB

  • MD5

    599350caef135b7dbc482f0c5d86d8f0

  • SHA1

    479b26c73a80ccd58b491de907d7fed5b55dca02

  • SHA256

    fb1c2c8af37643fbbaabeef32b82d3267852144d5b7d0f510c85814fee8f2860

  • SHA512

    75960fa50928f630f6d3064eb588df10d9684ce15a0bb3c0e1459479e01584d1926054d781c8f763316a8c7d045787ffccfb8f2e0b9c99f4fdb421dfcba1109d

  • SSDEEP

    3072:rmLrbZ0/AgUR9ZmalgPCYIAvRQqShr1RhAo+ie0TZ:rmrbZ0kk+tAvSqShr1R6xie8Z

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fb1c2c8af37643fbbaabeef32b82d3267852144d5b7d0f510c85814fee8f2860N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections