General

  • Target

    94d8d65f3daf4953c04d26061ee911b1edc45f812a5c5c22a5d3df72ed8627ddN

  • Size

    128KB

  • MD5

    c652149a4a62455a394f8a5261d61640

  • SHA1

    4b76a05085f940a38309fc0e8ab4523253b12f94

  • SHA256

    94d8d65f3daf4953c04d26061ee911b1edc45f812a5c5c22a5d3df72ed8627dd

  • SHA512

    7d2ad842bb3059d6dd0624fdb202bd3bae0e51991e01c4842c0dc8cf50df4e4df5f9173ef91f99890c80b06ea056e36aba172d5117e2c624280018d3d1cb12d2

  • SSDEEP

    3072:I/P/tqWmQ1NDKiPt1mI08uFafmHURHAVgnvedh6:uP/tqWr1NOiVwI08uF8YU8gnve7

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 94d8d65f3daf4953c04d26061ee911b1edc45f812a5c5c22a5d3df72ed8627ddN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections