General

  • Target

    e7a9ce9885e6e55cfeacb1f77f96d159f68fd5b6ad11e92a1c7e94614c7ba402N

  • Size

    123KB

  • MD5

    43ce3441622a74b904d780eacbecf870

  • SHA1

    8b23e7b8edfa900118264387d0e2e271385c09a7

  • SHA256

    e7a9ce9885e6e55cfeacb1f77f96d159f68fd5b6ad11e92a1c7e94614c7ba402

  • SHA512

    9ee6e081213b9e14cc5afc81ab49cfb8871f171a919264371e7dc6380eff0f4690fdd8903a38316c66ea92954fb82777603625bab28165effa759c2742471450

  • SSDEEP

    3072:M/ODidMxQ8TWw8MwYfRYSa9rR85DEn5k7r8:GRux3f4rQD85k/8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e7a9ce9885e6e55cfeacb1f77f96d159f68fd5b6ad11e92a1c7e94614c7ba402N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections