General

  • Target

    e99814a1569883621339a74c0dd4b1037bbf2dbb1f5d2ed74c07d8f0e9298256

  • Size

    128KB

  • MD5

    cb785ef7678308724444508fe4e4af07

  • SHA1

    e839147231ac041162d91060dcc2dbcf148ba9be

  • SHA256

    e99814a1569883621339a74c0dd4b1037bbf2dbb1f5d2ed74c07d8f0e9298256

  • SHA512

    743d96831533432d4f8405e39d0bfb80c4a402809a669b1516442ce023f45d69f071e5401130f56d23ce79ff01871d80ef120fa9283c586ce5e69a666a58a04a

  • SSDEEP

    3072:59ISfyjNtgC2+IJkMi/T84PxMeEvPOdgujv6NLPfFFrKP9:QSwPv2LiI4JML3OdgawrFZKP

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e99814a1569883621339a74c0dd4b1037bbf2dbb1f5d2ed74c07d8f0e9298256
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections