General

  • Target

    14aae65a8d9e7f8d6259e89e580eadf2d9449fba3182267c3266fa3d255ed684N

  • Size

    144KB

  • MD5

    ae8690130ce11e4a308ec8b9ef2ec2c0

  • SHA1

    a0053a450eabb188089aa82f7f5f396ec321b5ff

  • SHA256

    14aae65a8d9e7f8d6259e89e580eadf2d9449fba3182267c3266fa3d255ed684

  • SHA512

    89cfb987989505126398cb38303809d7a7325422217abdf2cc5b74cff56948eaf996949d2d04e8f5e4cdc3653576af8e88b5fb94ab8912289aeea1d48a7d26e8

  • SSDEEP

    3072:C86QDdUqC8by6fOBCdKZdgGgHq/Wp+YmKfxgQdxvq:XDdUqBbySOBMKZdgGUmKyIxi

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 14aae65a8d9e7f8d6259e89e580eadf2d9449fba3182267c3266fa3d255ed684N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections