Overview

overview

10

Static

static

10

240efd6167...43.exe

windows7-x64

10

240efd6167...43.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    240efd61675e73d95bb0c500f68458891bf9ade093ed8f6ec109e2d02a085a43.exe

  • Size

    128KB

  • MD5

    6351a4de04bc59626837335057696513

  • SHA1

    d438340d46ed44c1aa6350a31d47b06dc7097b25

  • SHA256

    240efd61675e73d95bb0c500f68458891bf9ade093ed8f6ec109e2d02a085a43

  • SHA512

    499caf3540537d82f40cd296f69730fd7a341346768381d41e6e0abe8c801ff653e7324a7fb2a8a04b2479b2177617a9771249de7f3b11c630bbd49604d22cde

  • SSDEEP

    3072:vrENxiRqHn0nFxc0r8obJjNjlzGYJpD9r8XxrYnQM:4NZH0zvr//NGyZ6YX

Score
10/10
berbew

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
    berbew
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 240efd61675e73d95bb0c500f68458891bf9ade093ed8f6ec109e2d02a085a43.exe
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections