General

  • Target

    cfbbc72b9edf7d1bf337b0c2dc49b5034a9ef38974335720bd224a7c5442b7fbN

  • Size

    256KB

  • MD5

    108d81d77162e3f05216a565c6c103b0

  • SHA1

    9689c6c98ddb3584c995911a4873aad836d02eed

  • SHA256

    cfbbc72b9edf7d1bf337b0c2dc49b5034a9ef38974335720bd224a7c5442b7fb

  • SHA512

    00f8878b384503dcae27af1271146953d8ee41fdb1d09a5739d130ecde5045bdfa00928315021aaf757d29cb76fcdd1dd2b3d450831d660c7addbabaec2704e3

  • SSDEEP

    6144:dc7tg/Vgui/GOORjMmRUoooooooooooooooooooooooooy/G:dcivi//OVLCoooooooooooooooooooof

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cfbbc72b9edf7d1bf337b0c2dc49b5034a9ef38974335720bd224a7c5442b7fbN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections