General

  • Target

    25b5cb346955098d3e8e2f59ae1b9b4f6dcaff604f52861e5c1a6dde5b64a9d1N

  • Size

    128KB

  • MD5

    24647862fbb442bc9a3325532dec40b0

  • SHA1

    54cdfd91e4f8b4bebcacda773da66211e98b9509

  • SHA256

    25b5cb346955098d3e8e2f59ae1b9b4f6dcaff604f52861e5c1a6dde5b64a9d1

  • SHA512

    bfd1d1e1b4e6599b87a454a55b63d69b13ea425602b0e0792041c683a0af40beadbaf5c709de9eb6be654f733df7c94231498e19400e43dee17671feaadc9401

  • SSDEEP

    3072:RJO5v/Bd44i4EdWRR9b/FWZ+T08uFafmHURHAVgnvedh6:fqvD44i4gWRR9b//T08uF8YU8gnve7

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 25b5cb346955098d3e8e2f59ae1b9b4f6dcaff604f52861e5c1a6dde5b64a9d1N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections