General

  • Target

    e965336b83c2050b8be44c1d942416822922ab9d965c6b1b9464e6234d22a101

  • Size

    276KB

  • MD5

    0175f4597b75ce0b866f16e8b3679b67

  • SHA1

    b63931f3f9cba15bdf641ad9a568b32ad32433c2

  • SHA256

    e965336b83c2050b8be44c1d942416822922ab9d965c6b1b9464e6234d22a101

  • SHA512

    8c7b92953dcba388f05cccd8ed6c2031db0cfa40e5eb7f3981def4e68e98a5c3664a14bf191596946549ea648631a7a4a83ac9a6c6faa30160ac49c4ee031c1d

  • SSDEEP

    3072:9/ZO1wGkZI0bSkzeS5pAgYIqGvJ6887lbyMGjXF1kqaholmtbCQVDrM8d7wMtLAr:m1wm0bTzdZMGXF5ahdt3rM8d7TtLa

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e965336b83c2050b8be44c1d942416822922ab9d965c6b1b9464e6234d22a101
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections