General

  • Target

    017ef3bccd761087f2cbb63327ee1b7982dd0681c6e4b03cb5030d87a639f6bcN

  • Size

    144KB

  • MD5

    ebd0045c92957dd159c7ddf57575d3a0

  • SHA1

    f2fcde86790c69fe02127ff7e82bf81c6f75e513

  • SHA256

    017ef3bccd761087f2cbb63327ee1b7982dd0681c6e4b03cb5030d87a639f6bc

  • SHA512

    41a419eb5dc8eb509b6284e787e6c7744573a679a32b1c92ea094e076975826638b5191bf331ff8221f92e105cff7f82c9969ead4f0b348475916ba9d9cf2703

  • SSDEEP

    3072:Ad/2jicYT8m90p1JVguzdH13+EE+RaZ6r+GDZnBcV8:o/2+8H3quzd5IF6rfBBcV8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 017ef3bccd761087f2cbb63327ee1b7982dd0681c6e4b03cb5030d87a639f6bcN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections