General

  • Target

    f13c6e581f9a06a381d52ab3d1dd1abcb717898bcc9b692683e9382b77e27b04N

  • Size

    161KB

  • MD5

    bf1e76342820775aa7798fbeb0c73670

  • SHA1

    485f1f1a2ae43ae1d49e9ed038328a2aad1bda2d

  • SHA256

    f13c6e581f9a06a381d52ab3d1dd1abcb717898bcc9b692683e9382b77e27b04

  • SHA512

    d8a214b5be4c376dd885aaf00d44c92945a8ce7bbb850b3c7081526d01ca962d9ca9cf5f5a0c2337ddfa64f1bae7584a7b2a26348d960da9f4a6be54828d5b66

  • SSDEEP

    3072:llAmo4/IE72O1lAkeVwtCJXeex7rrIRZK8K8/kvN:llAx4t72OHAkeVwtmeetrIyRN

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f13c6e581f9a06a381d52ab3d1dd1abcb717898bcc9b692683e9382b77e27b04N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections