General

  • Target

    ab3d6e508f589a2d71b92826e73fee04f84d59d5498b55a4c751029321dbec0aN

  • Size

    128KB

  • MD5

    654b2e5db919a81e17573e263b7d6c70

  • SHA1

    c05cd7635261c2155f7b0476f7e98754256c9413

  • SHA256

    ab3d6e508f589a2d71b92826e73fee04f84d59d5498b55a4c751029321dbec0a

  • SHA512

    09a897c1668f7696a5ad95cceddd2e64985733c20ff3881aabfe5fdf98b4d70e436f619f11928ee60e1d4d08a5752a9ca4d22fff442ce99901c69d940bd4ca37

  • SSDEEP

    3072:5uFu6fMzGj+oSeSnYDd1AZoUBW3FJeRuaWNXmgu+tB:Af41oSe4SdWZHEFJ7aWN1B

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab3d6e508f589a2d71b92826e73fee04f84d59d5498b55a4c751029321dbec0aN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections