General

  • Target

    2f6abe019a1de7bbf7ef1c3b3e552d838f1dbdc2eabbb3adf5ac171db095b33f

  • Size

    128KB

  • MD5

    f6503f2cbc9fdfdd135103f29b72dd15

  • SHA1

    287a3ae7d600427b99947678e00bbdc5521965e0

  • SHA256

    2f6abe019a1de7bbf7ef1c3b3e552d838f1dbdc2eabbb3adf5ac171db095b33f

  • SHA512

    2028d0518835d03f02e964baa3283618747561f12d9ae933d8e1a5a85f825884bdad9b40e296291e37fe10d5b5b7995a23634d7a0dfe71016c3796b042771c47

  • SSDEEP

    3072:W+g94qS+9WO6/cq3gRlTzOOPJ+2KQO+zrIxFnB+dM:oL9Wf3OP8QO+zrWnAdM

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f6abe019a1de7bbf7ef1c3b3e552d838f1dbdc2eabbb3adf5ac171db095b33f
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections