General

  • Target

    cf1c574642f20a95f3898c502ef3bf1140970ddfb88bb427983a94ffe02b9742N

  • Size

    192KB

  • MD5

    b31fcdb2b2d19c28ed84080dd41083f0

  • SHA1

    bc78cb2a4bf8d399bffdd15cda91086e16bd1748

  • SHA256

    cf1c574642f20a95f3898c502ef3bf1140970ddfb88bb427983a94ffe02b9742

  • SHA512

    8211d3e4cf98aa47be7ee44e9e42ac9947f992da2042dd7229c0878988b967a964691fce93659703204e8e6742c2ce457989be646ac85fc0f6952b1f2941e626

  • SSDEEP

    3072:Rveva2dHSvJN4Sv66x53ekiwEieFKPD375lHzpa1P2FU6UK7q4+5DbGTO6GQd3JB:RveaTsSyy5AwEieYr75lHzpaF2e6UK+m

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cf1c574642f20a95f3898c502ef3bf1140970ddfb88bb427983a94ffe02b9742N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections