General

  • Target

    9ecc137a4596c5ee9565cc394d8cfdc69c6b4b06b6662818ee1f3d53dae087ffN

  • Size

    211KB

  • MD5

    bce567ea9e15590310317cb5816a3c80

  • SHA1

    aec0c5058f9f8c380d9188e7f83fe52b79608ba0

  • SHA256

    9ecc137a4596c5ee9565cc394d8cfdc69c6b4b06b6662818ee1f3d53dae087ff

  • SHA512

    9de3c2d6cb0648ab264121f04406008a9e403eadbcb78519dd465bf9bf8c702133b4adddc2536d62ae6bd811b8896e75fbaed8cd7ed2e5acd24b0d0a536e7fb6

  • SSDEEP

    6144:A1F6TW4ZEFeYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/N:3W4qFeYr75lTefkY660fII

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9ecc137a4596c5ee9565cc394d8cfdc69c6b4b06b6662818ee1f3d53dae087ffN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections