General

  • Target

    cc442fd3381382fc4c23215c6588b710b88e215d011bb36917955e67eb0569adN

  • Size

    160KB

  • MD5

    ede68cd7f043ececdd95513311b16550

  • SHA1

    1558ebe7d6180274e2216c0a392f4cdfe8722e6f

  • SHA256

    cc442fd3381382fc4c23215c6588b710b88e215d011bb36917955e67eb0569ad

  • SHA512

    54f9bd8c73a02aae6e3cb3e7905a45c397412d0f1e7da3e51878949dec0d4c30f836559153c74eaeeca7959cfe55ce9359a29384153d646bbbec270114f3e5fa

  • SSDEEP

    3072:ZLKMYi14gBulPTz2gb3a3+X13XRzrgHq/Wp+YmKfxgQdxvr:ZLKf4kPTzv7aOl3BzrUmKyIxT

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cc442fd3381382fc4c23215c6588b710b88e215d011bb36917955e67eb0569adN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections