General

  • Target

    36a981435a4a712178f7981df59d834ee5799b23503f0fdbf2bad8045a6f513d

  • Size

    128KB

  • MD5

    ffa64938558fb7c9b2181ab6953a96bf

  • SHA1

    f2ee0ca6f8f2704fad8a7a0db68a280596b8b9b9

  • SHA256

    36a981435a4a712178f7981df59d834ee5799b23503f0fdbf2bad8045a6f513d

  • SHA512

    6688819631556fc4bd80698f22582634e9669e4f41c76dfeb972bf007b52b475b1aa31faac2227f08952b0880a9ac8df392aaaad91a4cd693dd0e6e4899b3fbc

  • SSDEEP

    3072:ItPdALudZC6Rr9R8oPIADO6rnDd1AZoUBW3FJeRuaWNXmgu+tB:EAYPz7rDdWZHEFJ7aWN1B

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 36a981435a4a712178f7981df59d834ee5799b23503f0fdbf2bad8045a6f513d
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections