General

  • Target

    4b556339e6e33c0deb917968f95541a340f77363c740c097fcd7abb26c9ea878N

  • Size

    123KB

  • MD5

    dd9dfc0859dff507b23e9ec4d62bee70

  • SHA1

    eab8f58edb8661f9dc720967e26e628dc935f6a3

  • SHA256

    4b556339e6e33c0deb917968f95541a340f77363c740c097fcd7abb26c9ea878

  • SHA512

    78dea97ffdcb477cf202174677376886b8a754d4c07ea4e93f2083624a491437b4472212eb3f0cea94b3e2579798d233f670ced02453c1b2faba1eef16ef6851

  • SSDEEP

    3072:PjGRrf0Rbu1dbmevxeRYSa9rR85DEn5k7r8:Psr8R6/lvxe4rQD85k/8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b556339e6e33c0deb917968f95541a340f77363c740c097fcd7abb26c9ea878N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections