General

  • Target

    1030be347373a255724efc1537e7ff595e0180f019f14181b16b7824bf537571

  • Size

    109KB

  • MD5

    aa3f769be1eba2c3c5f5fffb0ba32f08

  • SHA1

    3a9eb4c442f493d2066594bad2dc6be33391a1ac

  • SHA256

    1030be347373a255724efc1537e7ff595e0180f019f14181b16b7824bf537571

  • SHA512

    253282e335ffc96d8a46e24298dd51bdcfffc6885d6899436c596e1cc2011ad1fa26c6f92adbd5a0713b8310d1b793df86159268f2481b6363ba8826f5065a2c

  • SSDEEP

    3072:iFbf13Wx2SX3Ebbi8zxbyYJ9ALCqwzBu1DjHLMVDqqkSpR:iFbxejX3obi8wYJ9gwtu1DjrFqhz

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1030be347373a255724efc1537e7ff595e0180f019f14181b16b7824bf537571
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections