General

  • Target

    7e7a2b1323213a0387000955a593f92c9cb64610ebcd86d6fb9aaa6165240bcfN

  • Size

    128KB

  • MD5

    c345532da44b6b79603c36aeddc699d0

  • SHA1

    b19dfabf940f31e540222cf8c63bde01b4c1d938

  • SHA256

    7e7a2b1323213a0387000955a593f92c9cb64610ebcd86d6fb9aaa6165240bcf

  • SHA512

    9ccb260d77f522aa8d55e5afe552f1bd80cbfebe2187ae24b374fd507251adfb38a193f72ac8a96b3799fe255236200f5e2a955489d7a27936265b463ee8b9c8

  • SSDEEP

    3072:xea4RuurS7hMrZDEtrVtjY6208uFafmHURHAVgnvedh6:v2hamZDoBtP208uF8YU8gnve7

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7e7a2b1323213a0387000955a593f92c9cb64610ebcd86d6fb9aaa6165240bcfN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections