General

  • Target

    f7de0ad7a5989cbe1771d7c6bfc83754a1892bf2738318e75a39c65b0478e57bN

  • Size

    109KB

  • MD5

    d684af49991b625e309e4cfcd6f6f870

  • SHA1

    4a23896f62d156d38a4590a3b3e5734b7e477259

  • SHA256

    f7de0ad7a5989cbe1771d7c6bfc83754a1892bf2738318e75a39c65b0478e57b

  • SHA512

    fce49a4c99708b7e2694e8c7013d2b41837e9ef1e5fbc088fec11f258f6e5980308322500aa0fb820533858adfdaa65e12ab8187304ebe146af6b83376b2ca42

  • SSDEEP

    3072:bAPQ3Yf02z6tm1TleoFp2QX+5J9GLCqwzBu1DjHLMVDqqkSp:YcwTTllFcs+5J9Cwtu1DjrFqh

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f7de0ad7a5989cbe1771d7c6bfc83754a1892bf2738318e75a39c65b0478e57bN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections