General

  • Target

    9a9de588eb92da475c9e66ee3b0b29bc0d75c93e6be98de0eceeb8234b1e7987N

  • Size

    136KB

  • MD5

    fa13f3b89a0c054158ed13dde256b1f0

  • SHA1

    31224026c6815a557e355766b477bc15a6a0b4da

  • SHA256

    9a9de588eb92da475c9e66ee3b0b29bc0d75c93e6be98de0eceeb8234b1e7987

  • SHA512

    eabf4fb6f430820841f5ef9a77274d2ea714b9df43a156cca2276e2035846648d3b283d8041a90aabdb934dee2e517e65f85f0b4d50ac48d97b56735b3dff705

  • SSDEEP

    1536:dyqu5bf5OgzwCa21jC4hTlJ6Z8xgjLBqo9NgiJyFEjz0cZ44mjD9r823FQ75/Dtx:dOPz3tJlJbxg/L5gFVi/mjRrz3OT

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9a9de588eb92da475c9e66ee3b0b29bc0d75c93e6be98de0eceeb8234b1e7987N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections