General

  • Target

    2e21e22af36f907c2697e0d8845afb08b43c6ea7c532d5eecf243f1651515885N

  • Size

    112KB

  • MD5

    d4d560c9396875d692d7c508f52373e0

  • SHA1

    a63954e40862857ba28036eec534a987c32b3617

  • SHA256

    2e21e22af36f907c2697e0d8845afb08b43c6ea7c532d5eecf243f1651515885

  • SHA512

    39106d1b10ce642dea4fb790722c43188cbc8c549762c49ef0f92e13ba6892ef38a12d602ef9016d2060ab592a1ef4bef27f3f692fd45ad3a2e1da19b4dcba51

  • SSDEEP

    1536:0hOkhPtgGc3Lht43r1cTulS3l9SVrBQHzhyzVlBMDJj6ikRynlypv8LIuCseNIQ:MOIFgvhsiK4qlQH9EV7W6+lc802eSQ

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e21e22af36f907c2697e0d8845afb08b43c6ea7c532d5eecf243f1651515885N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections