General

  • Target

    f7904807e3a2a9768127902473cf6144eca8284336bea7c0fbb5e4852f29afb7N

  • Size

    128KB

  • MD5

    bf5b286e9bd666d572f778150102cc90

  • SHA1

    1663581ba221b57152d235e8f31d253a490bffa6

  • SHA256

    f7904807e3a2a9768127902473cf6144eca8284336bea7c0fbb5e4852f29afb7

  • SHA512

    13cb943f201cd69d8416c34564f51b0d54d99addd840b5cb3bae8e1fd6188069459928a6772aa2f9c23367dc14d1cdc7bf1354b1408cca8af69d842191ae3001

  • SSDEEP

    3072:a3PZPwOvI0zECQThBNJVRdZlht8O1x95FJVRdZ9ElwR08uFafmHURHAVgnvedh6:aBPa0zKBNJVRdZlht8O1x95FJVRdZalP

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f7904807e3a2a9768127902473cf6144eca8284336bea7c0fbb5e4852f29afb7N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections