General

  • Target

    6f2d0f7bc985cc3b2bcd7f07d5e3e2a83bbbfc1e019977e16f98017d87b0a6e0N

  • Size

    110KB

  • MD5

    b019a91b5f700a0eed230a8a6469f010

  • SHA1

    c75e1880b6beddc0f89ba6bf4f08866f2c73a4ce

  • SHA256

    6f2d0f7bc985cc3b2bcd7f07d5e3e2a83bbbfc1e019977e16f98017d87b0a6e0

  • SHA512

    2a8d9fea7fc4a1ff6e8599eebf9da0fe61bb563bd90b3ed2e99c1c35ee8ae41d43217b521ee594e162798c4745398fb5c4778877423618af9920af9e601779f6

  • SSDEEP

    1536:zDtiZqldTYD+i/a+qnszKpln42jH8vcFV+znCr6llTcTVB9t8BciDM8Vq9klcIXP:zDtiAiOss1j8vcLrMKTLJiXSk6IXP

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f2d0f7bc985cc3b2bcd7f07d5e3e2a83bbbfc1e019977e16f98017d87b0a6e0N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections