General

  • Target

    9a90af25c483dbd9544f29d72afced474b357563d15064aeb946676c894ba5c2N

  • Size

    161KB

  • MD5

    d58d6007c54c473c6e6a3baae2312290

  • SHA1

    ba45b35f52018baef1206c64943de4c3998e1853

  • SHA256

    9a90af25c483dbd9544f29d72afced474b357563d15064aeb946676c894ba5c2

  • SHA512

    1edc96b642d25655f43ab603a9bbb7d9a6d3be75b65406c93992fcd946e39f691dc448471aa2e13514bd16785e10b7607135f6050d8f1ed4f9b4187414602988

  • SSDEEP

    3072:cUyXD8zErwbz5c4/sreQA10pXpAk7VwtCJXeex7rrIRZK8K8/kvN:cUq8zE0f5wn5Ak7VwtmeetrIyRN

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9a90af25c483dbd9544f29d72afced474b357563d15064aeb946676c894ba5c2N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections