General

  • Target

    58c0026fed67ca0a449ad24b7e53ecabddfa8b5667de20802a66410ebd9f8f80N

  • Size

    224KB

  • MD5

    c0463dde664d12d30e1d5b210b23ff90

  • SHA1

    aaefc0d60ea9ac558cf4d511be10dff75a7cf032

  • SHA256

    58c0026fed67ca0a449ad24b7e53ecabddfa8b5667de20802a66410ebd9f8f80

  • SHA512

    656c4d33f37bb0b09c6da7f9f5a2505adbbde081f2f643cfb3707202ac8e2c756eebb3133a01b0f2b33876f1da3167b633541f7c84c833ca44bf51ad656a6ff9

  • SSDEEP

    6144:GcLWanZhGq5LRlUivKvUmKyIxLDXXoq9F1:qanZjZoivKv32XXf9/

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 58c0026fed67ca0a449ad24b7e53ecabddfa8b5667de20802a66410ebd9f8f80N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections