General

  • Target

    41d6d165fc3f439adecfa3b73b60142cb41de411601054934355d3ecd29ec18f

  • Size

    192KB

  • MD5

    a566430b5f333c9d5401d9890360e5af

  • SHA1

    fae32f1e0f86976d6ec672fa72814e1f5ee4ae80

  • SHA256

    41d6d165fc3f439adecfa3b73b60142cb41de411601054934355d3ecd29ec18f

  • SHA512

    1b4a2e1cdd1eb2c1b2d7cf67a855c896afc13e0252c9f7f8b2e54c2ce261c322650476698beeff660306c46363646eb3497769101f189a8a1795d046c1f6b034

  • SSDEEP

    3072:fzD4RXD7A0kb09kDm2VP4gBunme5Ny63kremwc/gHq/Wp+YmKfxgQdxvzSTsXXo8:fzDmXA0kg9kDm2VP4gBqNy63/fc/UmKL

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 41d6d165fc3f439adecfa3b73b60142cb41de411601054934355d3ecd29ec18f
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections