General

  • Target

    00ea21037620fe7467de324cc6d0527a5dda76140fb63d359d918dad5e94e281N

  • Size

    161KB

  • MD5

    04dcaf41dd4963f0c333778fc7b1eda0

  • SHA1

    54d22308e7babd16ed5630b2739f32e3f6cb31b0

  • SHA256

    00ea21037620fe7467de324cc6d0527a5dda76140fb63d359d918dad5e94e281

  • SHA512

    d10c6a70c7d6f0e4f5d9491d8e9dcbee15d8cc3186bed7fa97cf791429eadb895aa2e0cdbb8403513d8b400c5202ed342a16941ed459047212bf6dec138494a6

  • SSDEEP

    3072:jwDP7o6f0Wbj39s4gd6NkaVwtCJXeex7rrIRZK8K8/kvV:I7o439sjd6NkaVwtmeetrIyRV

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 00ea21037620fe7467de324cc6d0527a5dda76140fb63d359d918dad5e94e281N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections