General

  • Target

    ee59e3e21d0be3951f4d46c065ea0b5a41d670ad45edba9e06842d2bd6ed19c0

  • Size

    211KB

  • MD5

    74479ddbb9e1b41caec640ff8ea2298f

  • SHA1

    7695b70f1f3f25fb70e82082e9cfa0d2247fb932

  • SHA256

    ee59e3e21d0be3951f4d46c065ea0b5a41d670ad45edba9e06842d2bd6ed19c0

  • SHA512

    f50c0d61d20b1df12ee4a950236fe2f6cc34cfa2e5aa964f07d807abedddf13aaf15fe19ba4aadf1982513e9cacea3d6a6f215114ea3347b913f9e1b86f608f2

  • SSDEEP

    6144:/563HTE4eYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/N:/A3Q4eYr75lTefkY660fII

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ee59e3e21d0be3951f4d46c065ea0b5a41d670ad45edba9e06842d2bd6ed19c0
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections