General

  • Target

    76fa00760c8f08453e35e1b8a818d7e2a5c7af56d9c369844392979b30d0500bN

  • Size

    136KB

  • MD5

    c58ae64343576d7f3c47e0c7010180e0

  • SHA1

    9bb03f9f924114755bb22db5b5da65d72cc7d248

  • SHA256

    76fa00760c8f08453e35e1b8a818d7e2a5c7af56d9c369844392979b30d0500b

  • SHA512

    9de0452c1123b13a5974dc9349d7a502f28ca15616987f8544ded77d0fe2ffba86c9d63a31f3b0be59f28a70545b9909997a45fa7654bd0f646daf0aa2d7ff06

  • SSDEEP

    1536:aaK6UddXXuH9eQZfYhfxCKP6y4O7zCRr7njz0cZ44mjD9r823FQ75/DtXh:a16UddXXW9HAhfxZPqRfki/mjRrz3OT

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 76fa00760c8f08453e35e1b8a818d7e2a5c7af56d9c369844392979b30d0500bN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections