General

  • Target

    39f1e4adf35776f3e34c6fd554e4dafac63933de3330adb35c7e6181e80c99f9N

  • Size

    161KB

  • MD5

    a6e555d286b72c7565a9477251f69930

  • SHA1

    3fd7c5d2935ae4ebe46e04ca7df935344848537b

  • SHA256

    39f1e4adf35776f3e34c6fd554e4dafac63933de3330adb35c7e6181e80c99f9

  • SHA512

    d46c70b794202b1dfecf7632cb7e9bf00c7f783b41ed102e1b986ab2a694863e95a65efb2c0df4befc595bd8fcf41d98a68209b439b5ecdbe59ddca52578f598

  • SSDEEP

    3072:77phQPasB4hkOVwtCJXeex7rrIRZK8K8/kv:77QP8kOVwtmeetrIyR

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 39f1e4adf35776f3e34c6fd554e4dafac63933de3330adb35c7e6181e80c99f9N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections