General

  • Target

    402deb786bbe7f4460c3ad0fe2be90cec89197a451348ee9a9b65da538e78952N

  • Size

    144KB

  • MD5

    acf909a54ff83d553bd1b32af37e72d0

  • SHA1

    7f7648f8192a89490ee70b6ebe39037d1588c643

  • SHA256

    402deb786bbe7f4460c3ad0fe2be90cec89197a451348ee9a9b65da538e78952

  • SHA512

    743dfbc0605eb063e8f0b234a75c7d844799cc3b2f1692e3d51a8e1ddbb29cb7d7c8201c1722c9d3aea09d6da8017ea4514cb35f7581fb41f871391d0a15a8a6

  • SSDEEP

    3072:VxLJlA1ZsazEN28jdf2gb3a3+X13XRzrgHq/Wp+YmKfxgQL:VxL0ep1jdfv7aOl3BzrUmKy0

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 402deb786bbe7f4460c3ad0fe2be90cec89197a451348ee9a9b65da538e78952N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections