General

  • Target

    237fd18cf6138b709891263e346a2c7ac47a73951276d3dcdcb867273d03164b

  • Size

    128KB

  • MD5

    bbfe661bfd7c5b8b4da508b19368ed99

  • SHA1

    e1d91d0e075ef7e14233af92715f2adf7aa82458

  • SHA256

    237fd18cf6138b709891263e346a2c7ac47a73951276d3dcdcb867273d03164b

  • SHA512

    1b128bb9283a0ab19f7b7aeea7fac2297991bdcc758fd538ce6b159e8481b8b4c77b17b0d855a72b6fd4931e0f6497cbb24474c41b2eec4162275ca9ad931f2b

  • SSDEEP

    3072:WRTB138EC20HBg+FDd1AZoUBW3FJeRuaWNXmgu+tB:wTBxMrXFdWZHEFJ7aWN1B

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 237fd18cf6138b709891263e346a2c7ac47a73951276d3dcdcb867273d03164b
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections