General

  • Target

    444a8a2d2c88b554a37ea452b53c4d2e1b7acf17b6e7d47f60b0688f3cb3c930N

  • Size

    256KB

  • MD5

    d599f2351859c0c8e624fbaf27a521e0

  • SHA1

    7fb56a859adf5ea8c1b08c5a5ee299dfa92d023e

  • SHA256

    444a8a2d2c88b554a37ea452b53c4d2e1b7acf17b6e7d47f60b0688f3cb3c930

  • SHA512

    998c791159ada48fe5243974f7c5241e5d79bc47184d33b4fb65f39fbd1391fa72aa65936f3967954aa6f99bd0a956a271d0e88640667efc704ce177b12b00cd

  • SSDEEP

    6144:OgoJVs7bQZBL6Jfi/GOORjMmRUoooooooooooooooooooooooooy/G:OpqQeVi//OVLCooooooooooooooooooN

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 444a8a2d2c88b554a37ea452b53c4d2e1b7acf17b6e7d47f60b0688f3cb3c930N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections