General

  • Target

    e268c7551385488f26bb924b904adb54160952b625d490b403b7895d61363df7N

  • Size

    207KB

  • MD5

    d67aaa03e35bb1d9e2938f3cd0877f40

  • SHA1

    d0fadef1bacf691b0d0c167b47d4dd368d9868ed

  • SHA256

    e268c7551385488f26bb924b904adb54160952b625d490b403b7895d61363df7

  • SHA512

    87a62a5d2d4e2f43d85e769845afdfa289a6f970ea24ee8b0721295c6dad21749fc41e90e3b918e7fc5370b60d4ba2f29458b718ec3c0bfc1e9d2441993c39b4

  • SSDEEP

    3072:Yy7ojfdZ7OGB5NqQmVjoSdoxx4KcWmjRrzyAyAtWgoJSWYVo2ASOvojoS:Yy7qfdZiC5NqQmVjj+VPj92d62ASOwj

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e268c7551385488f26bb924b904adb54160952b625d490b403b7895d61363df7N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections