General

  • Target

    d3178446cbf1be2d1461b6635eed397d67391541057142ad69d08ba58e1bfe35N

  • Size

    217KB

  • MD5

    df3ee80e9ed43d918f87209184a31c00

  • SHA1

    813c4aed58c2acd086378beac6ea286ec9687010

  • SHA256

    d3178446cbf1be2d1461b6635eed397d67391541057142ad69d08ba58e1bfe35

  • SHA512

    fe9a339ac908cd646042124ad6c97e3f71ef00a8a3ef185a93a81422366468ff09c3a80a46d67b8a8da266f5cd714ae6f403ffae88510ab04286287b41cfa6d1

  • SSDEEP

    3072:lWg7LyOCucktZERd2ReS5pAgYIqGvJ6887lbyMGjXF1kqaholmtbCQVD:h9t+X2RdZMGXF5ahdt3

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d3178446cbf1be2d1461b6635eed397d67391541057142ad69d08ba58e1bfe35N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections