General

  • Target

    878d760efdc696f49080d609474a664870956e9d216d9e22eecabf74ab8936f3N

  • Size

    240KB

  • MD5

    ef8be8549a0ab3821bf95f87a8c7f440

  • SHA1

    46115e4b8e03f3874cfb161f63856514970d7ff6

  • SHA256

    878d760efdc696f49080d609474a664870956e9d216d9e22eecabf74ab8936f3

  • SHA512

    f2e69f6d4369f3017e15e68942dd22692dbfab6ff774de80d14663d1c8502d91c69bc475af48d708cb6f053b72ca1babd263045a919c252824b783955f4b777b

  • SSDEEP

    6144:1dGhPSzU3N9GyZ6YugQdjGG1wsKm6eBgdQbkoKTBEA:z8P6U3vGyXu1jGG1wsGeBgRTGA

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 878d760efdc696f49080d609474a664870956e9d216d9e22eecabf74ab8936f3N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections