General

  • Target

    465bd92bf8e0eb95012c549d875b60245739057e2d10e43d1ed0d2fa8bf67e45

  • Size

    205KB

  • MD5

    a404f2ae7136edab09b79cc78d86b255

  • SHA1

    e3f8f31e81a02f2ae96e0ddc3929b8add36adb3c

  • SHA256

    465bd92bf8e0eb95012c549d875b60245739057e2d10e43d1ed0d2fa8bf67e45

  • SHA512

    b2fd1915b720bb71c8d2d360b3b0100a8dc04e5cf77d9a32a99785030c6302900c313fd29540c6f983bffee0765e96e53be824df38078a18ef5f0c337208ea60

  • SSDEEP

    6144:yjXTxVeltAS5q0bGyZ6YugQdjGG1wsKm6eBgdQbz:yjXNVGASBGyXu1jGG1wsGeBg8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 465bd92bf8e0eb95012c549d875b60245739057e2d10e43d1ed0d2fa8bf67e45
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections