General

  • Target

    70eea619ae5608022f29ba0b459b38d43dab1955df2b22bbdd5b90ebb235af8d

  • Size

    144KB

  • MD5

    d5182a8362f15dd236a7c5a4e7d96d4e

  • SHA1

    14aabdf8cddc80b89fd85d9dd5f0dd3359f057d3

  • SHA256

    70eea619ae5608022f29ba0b459b38d43dab1955df2b22bbdd5b90ebb235af8d

  • SHA512

    e4dfaf46719ad50af32dfb63e25d56805f859e55c6541a4c2b9e734f521d292a343aa1962f4047a1a4c9ca8a6f7610dda4a1f549b1f1784a78f353bc69fc83c6

  • SSDEEP

    3072:M3QOgp7HHreBZSfzdH13+EE+RaZ6r+GDZnBcV8:ycHLe7Gzd5IF6rfBBcV8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 70eea619ae5608022f29ba0b459b38d43dab1955df2b22bbdd5b90ebb235af8d
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections