General

  • Target

    55541f7e2a4d23a5f4a1d14f1cd84a2cf05a23d5d40c692238b89ce0ccbe449fN

  • Size

    192KB

  • MD5

    fddb2810b6f562a955c3d03e7a9493d0

  • SHA1

    c6a967414abb77e1381a34dc98e657869fa4a202

  • SHA256

    55541f7e2a4d23a5f4a1d14f1cd84a2cf05a23d5d40c692238b89ce0ccbe449f

  • SHA512

    645260336c49905ae443f7145ae4077e090dc17a9e73dfaeec54263d18a5c9f604923fcdf5d08f6d440f88aaca20e2ced4eeb3ead6910e32250624ec840d3a65

  • SSDEEP

    3072:l3TLdWAtULk/JxxH568sGeyxv5outkTy27zU:l3TLdWAtU0JPH56QeyR5oSkTl7zU

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 55541f7e2a4d23a5f4a1d14f1cd84a2cf05a23d5d40c692238b89ce0ccbe449fN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections