General

  • Target

    638f7545b766110c1b4c0e61a2e7684a552017768e663af9ea9f6be1143444f0N

  • Size

    128KB

  • MD5

    c3bcb081eaba873a74ec75977e2a3810

  • SHA1

    27983357ab2200ce948b12f628303c7529d0d597

  • SHA256

    638f7545b766110c1b4c0e61a2e7684a552017768e663af9ea9f6be1143444f0

  • SHA512

    7652515930dc9c7a4fdb8f619c53ea386e2446936c42a7b69c48c9ef10e60405f3a3ac2a15a8690c96324150275c2afc2cb131644bd5e06b83f2a5ae64d3ef86

  • SSDEEP

    3072:whl5O5dDxVn70SL2cS6W3FQo7fnEBctcp:Ol5OPvLDS6W3FF7fPtc

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 638f7545b766110c1b4c0e61a2e7684a552017768e663af9ea9f6be1143444f0N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections