General

  • Target

    89e613bde19be7465448d36716f65ef424bea44517e9dbe92cb17ea211315377N

  • Size

    256KB

  • MD5

    0621ab20354f44555c356ca9ffb33fd0

  • SHA1

    7fbb3e58ed88e79a6767ff3783fe748188ac9b59

  • SHA256

    89e613bde19be7465448d36716f65ef424bea44517e9dbe92cb17ea211315377

  • SHA512

    ea97e11794bb25331e7ecd4206151bb76ba2136d9983cd292478a3e1b9657940d84e54cb28de1e194d170834ad9e8153071c9829b6a91259d469fdf9528cea41

  • SSDEEP

    3072:U29WMTPbUa6loWfcXG2vHQQ1UkY1UkVHe1rUtst76UtoUtFVgtRQ2c+j:j9ijlqGeL1PY1PRe19V+j

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 89e613bde19be7465448d36716f65ef424bea44517e9dbe92cb17ea211315377N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections