General

  • Target

    f7f6a69cf50aff61193bc35012f10caa67d3d8bb4f8fb5ae768b4cf2d7423ac5

  • Size

    565KB

  • MD5

    e8ded2db78582da61f464ee49a46499a

  • SHA1

    e5fe6737a0fbd401f51ae0f8f9fac9b981134bf1

  • SHA256

    f7f6a69cf50aff61193bc35012f10caa67d3d8bb4f8fb5ae768b4cf2d7423ac5

  • SHA512

    33e797cc970959e128da748f1dc30ad9075ed3e370ccbd02484b4b4a711f75231e973ca267a1b34588835a437ea11af1ce9a5f37ddd12a827f8d6006e0666bd9

  • SSDEEP

    12288:bCmUpIcv96tuFjAh//+zrWAIAqWim/+zrWAI5KF8OX:bCmUpIc16tuFjAh/mvFimm09OX

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f7f6a69cf50aff61193bc35012f10caa67d3d8bb4f8fb5ae768b4cf2d7423ac5
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections