General

  • Target

    ba420602d29e0402635b9355ea3cac438e8f062a052d219c8f4788f261af0834N

  • Size

    123KB

  • MD5

    a1094bda7979360645065b6d40df9740

  • SHA1

    574aa4b001f77668a0310245facc2204fe502cba

  • SHA256

    ba420602d29e0402635b9355ea3cac438e8f062a052d219c8f4788f261af0834

  • SHA512

    e9ce84d28f35513949085b8ba0c6fd3b070480ed1476e9c39c745ee0516886c49c5bb98b7cde58ee827af5b62fd18628b344fab343447ed415c17bca8ee67564

  • SSDEEP

    3072:BvUjuw1NvuzxOFqBLntRYSa9rR85DEn5k7r:VaNvu1Iont4rQD85k/

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ba420602d29e0402635b9355ea3cac438e8f062a052d219c8f4788f261af0834N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections