General

  • Target

    05c236727d65e522e7801e3d729c327e8952c255d2ac1289c94a841bc7a39b75

  • Size

    186KB

  • MD5

    26947ef73a6c4537a0751b6d168a81b4

  • SHA1

    72f55531e4daf54b6b58f93ef9e45f06412e1c33

  • SHA256

    05c236727d65e522e7801e3d729c327e8952c255d2ac1289c94a841bc7a39b75

  • SHA512

    02931d066468f391f0f92cecfc87086734585082e092401d16e264e6be5c561db44c2e2fcb217844739431b7d951f06cd2f4ad23d91dd77906dee84fe2e13f20

  • SSDEEP

    3072:C6GberSltf2pNe8ER3uezNqzGYJpD9r8XxrYnQg4sIgQxzjGG1wsKY:C6GySltaNe/NAGyZ6YugQdjGG1wsKY

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 05c236727d65e522e7801e3d729c327e8952c255d2ac1289c94a841bc7a39b75
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections