General

  • Target

    487d0617ae7f2fc0614e4c0e52711f02760c7d1a38e62dab7e55e95003ffbc31N

  • Size

    192KB

  • MD5

    fc44d45c7a225798ae17f731ac1d9c80

  • SHA1

    c80b0bc0206a19ecde7d5d97c671bf3a471d9a7f

  • SHA256

    487d0617ae7f2fc0614e4c0e52711f02760c7d1a38e62dab7e55e95003ffbc31

  • SHA512

    eefd1fcf537ebb2effaa41e648ad6155e956b62cc7db115d90a5c2e168673580b73a57b6a086a39278c40d90f91d0a70caa15a0e352d3caedaa2400cc20a4ccc

  • SSDEEP

    3072:Llne1bYWcuk+XhLA2Dd1AZoUBW3FJeRuaWNXmgu+tAcrbFAJc+RsUi1aVDk5:pnd4kM0UdWZHEFJ7aWN1rtMsP

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 487d0617ae7f2fc0614e4c0e52711f02760c7d1a38e62dab7e55e95003ffbc31N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections