General

  • Target

    fafb35b3d281af15e32ddb334d7029b238fb3717989d5f4c0bcbbb93bbe9cde0N

  • Size

    128KB

  • MD5

    da33f13ee41037457b494afd86223490

  • SHA1

    60215f40cfa5a473e5ce6a117100eb98eae4b976

  • SHA256

    fafb35b3d281af15e32ddb334d7029b238fb3717989d5f4c0bcbbb93bbe9cde0

  • SHA512

    3b76e1a3c4de94143f619aa67c5b3c1f8a7ea420f7734440b3896d61f95a281024443b15dfab3bebdf37b884c2d72a2988d73224de7707ced9f961f5042f5e40

  • SSDEEP

    3072:9pgy4nzSFzK0000000YUB08uFafmHURHAVgnvedh6:vN+SRK00000005B08uF8YU8gnve7

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fafb35b3d281af15e32ddb334d7029b238fb3717989d5f4c0bcbbb93bbe9cde0N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections