General

  • Target

    dbd558ca949a2d5800250e020671eee1455850ade75523a291daa876c3fe6775N

  • Size

    109KB

  • MD5

    c7f2b02fee6ea9cddcbe683e8ed1ee70

  • SHA1

    0ee74fe67eede7f62630d95bfa8571d4883fe3b4

  • SHA256

    dbd558ca949a2d5800250e020671eee1455850ade75523a291daa876c3fe6775

  • SHA512

    5b95abf4c44e309fdd05c7e10368fcf82938dfa5840b81ee9209ae8545c4f210cdec9e256bca95c093eab355d556bf7eb5cb64e5dfdb430a72127550e8d18c3f

  • SSDEEP

    3072:RPv+bS1heHBJ94LCqwzBu1DjHLMVDqqkSpR:Rv+bSDehJ9Ywtu1DjrFqhz

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dbd558ca949a2d5800250e020671eee1455850ade75523a291daa876c3fe6775N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections