General

  • Target

    16aeabdd4fa976d8300d3fdb6674ade48aefbb5fc3625388e149fe5713f6a3beN

  • Size

    112KB

  • MD5

    6907f65b3eb1a72463f6d400a042db10

  • SHA1

    bc89543ac45fcf0554136c9d8a0a98f97ffdbefb

  • SHA256

    16aeabdd4fa976d8300d3fdb6674ade48aefbb5fc3625388e149fe5713f6a3be

  • SHA512

    91e554a08db44bf78950af3cdea5d993dd297ae3c23c4d6784c334fe1f1b551d4b3c84af9e0dbeaa13d8b53f06d14681b6fefb352ea1454bd39da5040e7e46f6

  • SSDEEP

    3072:rUHzBHQQ6PcvwUgKKxxsw2FiIrSd+HUeOsYA4PL+lc802eSQ:S+RU1fFi9UHUZVilc856

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 16aeabdd4fa976d8300d3fdb6674ade48aefbb5fc3625388e149fe5713f6a3beN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections