General

  • Target

    4568870f9f31f8d58191f0153fb3ccf2109bb4ad8b99852ee7ec47422220bfb0N

  • Size

    123KB

  • MD5

    d35f124c5f8607c4a946d6d86776f4c0

  • SHA1

    0b92bd5d649663616b0ffb7f400ac494849de513

  • SHA256

    4568870f9f31f8d58191f0153fb3ccf2109bb4ad8b99852ee7ec47422220bfb0

  • SHA512

    0b1ec59061749348c5023adb1cc26e312150e4ada54e3e2669a86c1ab6e85768d04cea06e8542e08da2dc3752a4ae2e3b2d045c9ed41a1b1530eb805d5416943

  • SSDEEP

    3072:NSgQ0B11BEpkMJ+cimjNCKzmJRYSa9rR85DEn5k7r8:NQMCX/imjcK6J4rQD85k/8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4568870f9f31f8d58191f0153fb3ccf2109bb4ad8b99852ee7ec47422220bfb0N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections