General

  • Target

    e3c87e020879dc0ecedb7656017d98b32e18b2d24ee62f5dce85b1a974e3e923

  • Size

    256KB

  • MD5

    e0098a34f5a914212474578bc1826eeb

  • SHA1

    d0209e871f07fa542f1e78e3863bce54f1cf2b46

  • SHA256

    e3c87e020879dc0ecedb7656017d98b32e18b2d24ee62f5dce85b1a974e3e923

  • SHA512

    e576e99a7ecbe23558edd0362e34c53050aeb6d7531d461be8dfacf5b160161d4bb80a2265dfd0381fc14f26c8bfc352b006e41594bc8e64476b624b438ec0c9

  • SSDEEP

    6144:9aNm+tYS0GiguR5m6ni/GOORjMmRUoooooooooooooooooooooooooy/G:wNrtB0GibR5mai//OVLCoooooooooooC

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e3c87e020879dc0ecedb7656017d98b32e18b2d24ee62f5dce85b1a974e3e923
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections