General

  • Target

    4e815aea12d4832cfdb8eb0f34a516b4ce2b7416db2ff11001614e84070bbe85N

  • Size

    205KB

  • MD5

    99a9a786ec836ee267922772e154d170

  • SHA1

    9bd66f94fbf35cbd1108166f56021f269591e69f

  • SHA256

    4e815aea12d4832cfdb8eb0f34a516b4ce2b7416db2ff11001614e84070bbe85

  • SHA512

    0f21d14aad149cbada56251630776b5a47cb220beaa89f990fffc76be6cb4a65f2921693bcb4dd48e4bc67d63a4f2f34f0399029dd0abee5564aa2ba4aeef148

  • SSDEEP

    6144:If41oSeC5GyZ6YugQdjGG1wsKm6eBgdQbz:IA1QuGyXu1jGG1wsGeBg8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4e815aea12d4832cfdb8eb0f34a516b4ce2b7416db2ff11001614e84070bbe85N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections