General

  • Target

    2ddb38bef7f642d0234ce47b89a3c70f57697d1b9361c650309320329d478059N

  • Size

    144KB

  • MD5

    8341c6586db4708797664531ba42dbf0

  • SHA1

    722d9c18b0901511355b4d6d7367d889672e7478

  • SHA256

    2ddb38bef7f642d0234ce47b89a3c70f57697d1b9361c650309320329d478059

  • SHA512

    89fb6ec8f1e3514b973a442f92c7a5ba878c3ae96f49c9b2954588abe80a297b7246760171191044fcb777ca1258c5210416e706d4b9067ce868e4bf4a61298e

  • SSDEEP

    3072:M/wo0g5ZfzZJCAGuzAQcgCgHq/Wp+YmKfxgQdxvq:zo0I1ZJyLgCUmKyIxi

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2ddb38bef7f642d0234ce47b89a3c70f57697d1b9361c650309320329d478059N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections