General

  • Target

    f73cc13907bb2452347c7d974da21ce7c94862d325356731d20422f788480b94N

  • Size

    276KB

  • MD5

    508f562783e93efdd646a9abe45573a0

  • SHA1

    bf53839c627bd669ba73a93881ec1f600d76da31

  • SHA256

    f73cc13907bb2452347c7d974da21ce7c94862d325356731d20422f788480b94

  • SHA512

    4a4028a931d0b1e7d3cd52bbbf4e6a651b8f37beb9fa100b04e8999f9d4978a39976f40dafe008899c084953555e38b665b410b3c7fd23b9f958ed22d9abc512

  • SSDEEP

    3072:jXA8/vfTnTK1ChsqCcZoDb0fPbjY2YeS5pAgYIqGvJ6887lbyMGjXF1kqaholmtS:jXT/HTnMi1YdZMGXF5ahdt3rM8d7TtLa

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f73cc13907bb2452347c7d974da21ce7c94862d325356731d20422f788480b94N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections