General

  • Target

    795e19e1eda9d03c61caf2d7d794e8925fdc8608c1e8d4777235f8ca2ca0ac7cN

  • Size

    192KB

  • MD5

    d5dbc51505b31522b0714da58aed3470

  • SHA1

    43e3445fa79a08e03a736d13cd082406307f0ea7

  • SHA256

    795e19e1eda9d03c61caf2d7d794e8925fdc8608c1e8d4777235f8ca2ca0ac7c

  • SHA512

    b98db0b84b582b58c0ced2256fe9996a5f9457676c70780292608a6f525f7a293acc55a1af80a45745bc4dde90c3dc4ac4b75b017121c30c9c7ccf2ea2abc567

  • SSDEEP

    3072:TvXBEJzMN+NIIuULu7mUBSJLi/mjRrz3OaZFU24cQ7SZFU2:ONXNCIUBYLi/GOORjMmR

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 795e19e1eda9d03c61caf2d7d794e8925fdc8608c1e8d4777235f8ca2ca0ac7cN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections