General

  • Target

    343e6afc70c533203d9c6030003dce030b261ac7368cf1797771c3fb19f42492N

  • Size

    138KB

  • MD5

    91945e55b6fa9165d6e4da1508b742f0

  • SHA1

    2e503b6b79ebb7b59ba9f351983615c1fb456a33

  • SHA256

    343e6afc70c533203d9c6030003dce030b261ac7368cf1797771c3fb19f42492

  • SHA512

    5a2c687fb854fa1feb5000adc5ea832ad8eff48c51987de28d00b1e5af011177e883f8de6d04d8aa1960f5a4cec71cb55445745efba28fcc73bedc27eef2376b

  • SSDEEP

    3072:K9qTflk26pHDfaDZbHZMooaXkmW2wS7IrHrY8pjq6:6qTfq26pHStZJUmHwMOH/Vz

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 343e6afc70c533203d9c6030003dce030b261ac7368cf1797771c3fb19f42492N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections