General

  • Target

    19f5d119e5fa316489c5cc1c969efcacdbc309ebcc58473bc8bb8260ec6fffab

  • Size

    192KB

  • MD5

    f369ae1885779c978d2044c5249bebce

  • SHA1

    874ad0847efe5e481c4e55a6567b7e386a7b2649

  • SHA256

    19f5d119e5fa316489c5cc1c969efcacdbc309ebcc58473bc8bb8260ec6fffab

  • SHA512

    641bed8a2ad14db7ee8b18f7b149d97b2d268b39a7e13db04245b155e55cb1c84fdea4f17552beca7613455a1cd83cec67fe5c37b25c2271a02d85817083f37c

  • SSDEEP

    3072:WuHsZ5ev7FKm3oZsEeE3kremwc/gHq/Wp+YmKfxgQdxvzSTsXXoT2z:WuMZ5aBcqE3/fc/UmKyIxLDXXoqz

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 19f5d119e5fa316489c5cc1c969efcacdbc309ebcc58473bc8bb8260ec6fffab
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections