Overview

overview

10

Static

static

10

e669837f79...99.exe

windows7-x64

10

e669837f79...99.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e669837f79b74c3c0d802db401997adc97b5993e1736dc867cbc79f407879c99

  • Size

    161KB

  • MD5

    e481901954e2b5ef74e59274172f8ad3

  • SHA1

    947d1b1f97bbd685ccc3e0687c7c1b34d7e7696b

  • SHA256

    e669837f79b74c3c0d802db401997adc97b5993e1736dc867cbc79f407879c99

  • SHA512

    6db00bba4a26902f349314c17aa64ea08262a0643cb72ceafcc62a6f30f9c937a86992c4ffbbe93a67b55f64add67b2fc465fba911690c793ff34b8674adb471

  • SSDEEP

    3072:eol7FOOJLWeIrubbTSGb4kjVwtCJXeex7rrIRZK8K8/kvN:eG0LrmX+kjVwtmeetrIyRN

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e669837f79b74c3c0d802db401997adc97b5993e1736dc867cbc79f407879c99
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections