General

  • Target

    867e1b4f67ade13936f370a5487f548101e3879d50ce9308a058caed9a1ad0a4N

  • Size

    128KB

  • MD5

    97ae845929c468279103a8f5efef8fd0

  • SHA1

    494346decddc7d83102bca4f5c2e4c12539cd508

  • SHA256

    867e1b4f67ade13936f370a5487f548101e3879d50ce9308a058caed9a1ad0a4

  • SHA512

    51e7465bc0c5810d17af88c880d7ad52d004b48f6d203f2d44de9d2a5f2903825130f6f841ed78c6cfc0920826926c872488a4073e60b69b79b89a2717f6474c

  • SSDEEP

    3072:m8gQoVsaxhwA1xO5IZbXBIqDd1AZoUBW3FJeRuaWNXmgu+tB:m5FsaYyOuxIwdWZHEFJ7aWN1B

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 867e1b4f67ade13936f370a5487f548101e3879d50ce9308a058caed9a1ad0a4N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections