General

  • Target

    4a27ec0c2bc245a028daa0968f3ce1f873aaac44afbfa0d9af4041419ea738a5N

  • Size

    187KB

  • MD5

    e1251f05f253f61eaf5645d13a151bc0

  • SHA1

    5da00569cd668d9a8e2c485c0eca36da818e5718

  • SHA256

    4a27ec0c2bc245a028daa0968f3ce1f873aaac44afbfa0d9af4041419ea738a5

  • SHA512

    64fd13aadaf5f6e94e3dcb81c0c2def762cac6eab4ba8b1fc29b28b4a388e76b86abdd928d400a36e0a7be9f95f48ca1c7a0a34fd375b913b91521a6f9d36b12

  • SSDEEP

    3072:fLJXse1/cUB5V5sEIvLVgtRQ2c+tlB5xpWJLM77OkeCK2+hDueH:fVce1kUB5V5sZLV+tbFOLM77OLLt

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4a27ec0c2bc245a028daa0968f3ce1f873aaac44afbfa0d9af4041419ea738a5N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections