General

  • Target

    69217d54ea0fba4b1835f004b9f15ebc3e458fe37125cdba8c2ddef0ad2ba546N

  • Size

    276KB

  • MD5

    f737fb7b0d17157ec452e414ccd4a0b0

  • SHA1

    ed3e73213b295e553e6802402f1d2706d50c22c1

  • SHA256

    69217d54ea0fba4b1835f004b9f15ebc3e458fe37125cdba8c2ddef0ad2ba546

  • SHA512

    4e1d7c742d1dca0d53a80cd32656c810f2fefe39d80c59c3f254cfce945aa8fc110132a39569ed44eb6e895587f8afa6f54ec1058854012a8f5a7d160c820ac0

  • SSDEEP

    6144:suio1Xr0YUILp0+dZMGXF5ahdt3rM8d7TtLa:Uo1Xr0bILpfXFWtJ9O

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 69217d54ea0fba4b1835f004b9f15ebc3e458fe37125cdba8c2ddef0ad2ba546N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections