General

  • Target

    d9853770dad14042a7c0891d5f87561264cb8b6a04fdf7723760bcc87b19961fN

  • Size

    128KB

  • MD5

    dc782a25d0e2c7b46778e0ef37a394c0

  • SHA1

    bfd7f4c77d2f3d41e8595ee29beb9aafceb72d0c

  • SHA256

    d9853770dad14042a7c0891d5f87561264cb8b6a04fdf7723760bcc87b19961f

  • SHA512

    a948a580ba01c44db64497143586b20e09053f41ef9067e2bb3f819249b5959a5bf832fd2f88d1f42e18428e5c72c847b3aab50d2b50cfc74d20e589704ebaa9

  • SSDEEP

    1536:DcZ7ZsQvIw7GsqRRhUtofKrrvmiJxAFAghsBtFQoXa+dJnEBctOPpB:WpvIqGZRRiKKhiAghs3FQo7fnEBctcp

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d9853770dad14042a7c0891d5f87561264cb8b6a04fdf7723760bcc87b19961fN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections