General

  • Target

    9efc8a7b15aa72e2c1693fdd0f7f71bf941f5d99430698d7c2ec062815910161N

  • Size

    198KB

  • MD5

    f8bed6d5abe34d2428a3daf60d3f40c0

  • SHA1

    0f01e5a5213ba186d9e91c35589104003f62041a

  • SHA256

    9efc8a7b15aa72e2c1693fdd0f7f71bf941f5d99430698d7c2ec062815910161

  • SHA512

    e1fcc929d1348826f627c33b22880db4db4211ef1a400977a0262ac921a0022fd28801dbbdadddf39015c4a51762bf3ce838c0f93143d178e4f3b2ae1e4586f8

  • SSDEEP

    3072:BvWCwelICh0gOnZ8x+l5ri/4Sp+7H7wWkqrifbdB7dYk1Bx8DpsV6OzrCIwfE:BvhIChCZ8xiZi/BOHhkym/89bKws

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9efc8a7b15aa72e2c1693fdd0f7f71bf941f5d99430698d7c2ec062815910161N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections