General

  • Target

    02f3c9737da33665c7402699a171dc3517d775f375428fdd54c7bfe88544d91cN

  • Size

    112KB

  • MD5

    ee0d58cb9ea39785d7a6645425b718d0

  • SHA1

    c0d5ca015de1bd12b8179135f62ba656449b7486

  • SHA256

    02f3c9737da33665c7402699a171dc3517d775f375428fdd54c7bfe88544d91c

  • SHA512

    c8461a60a6d7e00da36ec81004057439361094286d8820fae989b1314176a2b6a70081699193357d40b89fd337ff6c0c78903a59b5762ae1eb1ad3d20b4b8087

  • SSDEEP

    3072:5B4gy/laQjwFJtpX7SAzdH13+EE+RaZ6r+Gd:5B4gy/laR3XWAzd5IF6rfd

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 02f3c9737da33665c7402699a171dc3517d775f375428fdd54c7bfe88544d91cN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections