General

  • Target

    732fab05dd796982d577c5b744541c294b36f8680553c5472cb815a70426a04cN

  • Size

    208KB

  • MD5

    761452e0450bbd0fcf97e52c868c9310

  • SHA1

    1f2138cb057219b513d4c75e9f50a096cb847ffc

  • SHA256

    732fab05dd796982d577c5b744541c294b36f8680553c5472cb815a70426a04c

  • SHA512

    9e7b63d89490ae7dc332d8f4e5647d7fd9ab1e3044e62f2a524d20a01afaf478ad92c85fc0fd2dac1d05df17a1ad43bf913ac25729d784d5f9e919d20e811063

  • SSDEEP

    6144:+WmsyLvbn13jP7HzfLXDvbnT/r3jP7HzfLXDvbnT/r3jP7HzfLXDvbnT/r3jP7HW:Pm3aeEE6uidyK

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 732fab05dd796982d577c5b744541c294b36f8680553c5472cb815a70426a04cN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections