General

  • Target

    66f412ed37a3674abb4be80a0f94d33e489592fccd0abf3668797cbcf8809599N

  • Size

    144KB

  • MD5

    bf36776f2b4ecb310c906f95d5b61d50

  • SHA1

    cf0b95e12981eaa2f604523c1b7f12819441f4f0

  • SHA256

    66f412ed37a3674abb4be80a0f94d33e489592fccd0abf3668797cbcf8809599

  • SHA512

    5f8e93d41da08a26315677d6c3091e01a13f8be76fd19309488a4791cc144836ae8f48504a5a11f046454ef28dffa9e25a8d0798ce78af2fa2072b5c8e6b2f1a

  • SSDEEP

    3072:YhAIhlRdDIwmsgozGYJpD9r8XxrYnQg4sI+:YhAI3EwmsgSGyZ6Yu+

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 66f412ed37a3674abb4be80a0f94d33e489592fccd0abf3668797cbcf8809599N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections