General

  • Target

    f152ab207598d7f6efbd854ee5ff0c2e68550657b6b06e80bafad75a81d7c4f7N

  • Size

    128KB

  • MD5

    b7fc719a210a129790cf955dcfb52d90

  • SHA1

    32380448c7f20a56bd932da280eca8d5b8d0436f

  • SHA256

    f152ab207598d7f6efbd854ee5ff0c2e68550657b6b06e80bafad75a81d7c4f7

  • SHA512

    b2703abd7d19fe42d38d3a9cb82904c10e0dc4a3205a0435c54a468a6ccebf42ce36d911bdf12f34dffae6ea8b0c323adbe6afa000818b07c357ab91597f1cf4

  • SSDEEP

    3072:niPNLevZGA1Oe+E9pui6yYPaI7DehizrVtNU:apzAnDpui6yYPaIGcC

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f152ab207598d7f6efbd854ee5ff0c2e68550657b6b06e80bafad75a81d7c4f7N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections