General

  • Target

    b9bf64ae0d6ac15dd449a192b515df0f2ed5fc627b237b06ac5867549923e590N

  • Size

    112KB

  • MD5

    cd75801df8aab1423782706178647750

  • SHA1

    ea7f4128a6cb21ee4d3554a74f82406c37427eea

  • SHA256

    b9bf64ae0d6ac15dd449a192b515df0f2ed5fc627b237b06ac5867549923e590

  • SHA512

    df2c2f9aaa264ddbd4654e42271ba78c108b62b517198ed551ed7b592704548960d3f9dc18ffb9ebbe20a01637b5ef8aed15a6b187711310d7a4b9358cecd5c4

  • SSDEEP

    3072:Qw6hAnqD7GBwWU7UkTEENaw9gB+lc802eSQ:QsnqD7GBwWU7BwzEg4lc856

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b9bf64ae0d6ac15dd449a192b515df0f2ed5fc627b237b06ac5867549923e590N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections