General

  • Target

    c60ea181c66690764d32f43f4cd27f7f4372586537d70e8d84bb07e4b150f8f0

  • Size

    161KB

  • MD5

    8792102bb8c1c2f9d479ae0f2e2288a1

  • SHA1

    b7d365b7e52f6050a43a1e2d3e45ac9d91e75273

  • SHA256

    c60ea181c66690764d32f43f4cd27f7f4372586537d70e8d84bb07e4b150f8f0

  • SHA512

    5a29eaf9afefdf5f8a2ca9fcf1956db99123b9a0aecff2bad5acf8a2ce7c5f5df86019694b092254f7e1ef40424eccf63823dbab3cfdb3788de19a782afc03be

  • SSDEEP

    3072:w/z0KWdUpxrnBIMaI6UFmxBP5k+VwtCJXeex7rrIRZK8K8/kv:w/z0fKFnGM9Fmlk+VwtmeetrIyR

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c60ea181c66690764d32f43f4cd27f7f4372586537d70e8d84bb07e4b150f8f0
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections