General

  • Target

    628beae5191b205b2e57f2ccd696fe64058b1bf3ebc28eff7f30688eae735462

  • Size

    123KB

  • MD5

    7d93da62b416f202b0ba97c57b07c800

  • SHA1

    a26294f9bfeeccb87d8dc4fa65cc87a9b6989682

  • SHA256

    628beae5191b205b2e57f2ccd696fe64058b1bf3ebc28eff7f30688eae735462

  • SHA512

    a782065c1a3445296c7471267015dcda1c8ac20028a1960cc2ccf4f0f69b65b773088f451de84aa33e645af5c79e789605f5c3c26774d7577fcc0e9c0a3c1351

  • SSDEEP

    3072:OX0gDXtFpAYiV4xp++RYSa9rR85DEn5k7r8:OkgDdQ42+4rQD85k/8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 628beae5191b205b2e57f2ccd696fe64058b1bf3ebc28eff7f30688eae735462
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections