General

  • Target

    e74782cbeb406ae4c616a7b8f70dafc84c19da50e1fe70072d310b1ae69c31d3N

  • Size

    112KB

  • MD5

    d31eabb139de0a4d40c606389ca3b0d0

  • SHA1

    8b30f39cd4dd48484bfe2daf4c44cab11e081160

  • SHA256

    e74782cbeb406ae4c616a7b8f70dafc84c19da50e1fe70072d310b1ae69c31d3

  • SHA512

    18dbb6dc40e99e5cacf315d3a5ecd9216979db488243b5681f12ec6b4bdcc2ce957f04081bb2304ef0b3735ee4a0b796b6b3cbfd3c6290025395e31456ae0959

  • SSDEEP

    3072:nH27rWVh4SIrDg0nQi0FeJLCQnFIBOaCUjKaVLjd:GrWVhjCDg0nQi0FeJLbnCBbC+nVLjd

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e74782cbeb406ae4c616a7b8f70dafc84c19da50e1fe70072d310b1ae69c31d3N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections