General

  • Target

    d2a9df02513b3920ae70aa5e8d53331f4e497313cd3ea95704f8259ad658c30dN

  • Size

    217KB

  • MD5

    fa56f76613cff0c7e1b8b31f5ab2ea20

  • SHA1

    3bc421799a0b522221a284b1d9b4ad5df0d7fa86

  • SHA256

    d2a9df02513b3920ae70aa5e8d53331f4e497313cd3ea95704f8259ad658c30d

  • SHA512

    5dbfbd68f37e44adcf50c5822ad69e66d77ddddadb99ed5f5c49aafb463f86fdf33fa4a753a8536a97b7620beeabb685da2709ea70296eb2de021bb83259a9c3

  • SSDEEP

    3072:0GrtT7wQZ3IQHwBatPQQWZuLW1eS5pAgYIqGvJ6887lbyMGjXF1kqaholmtbCQVD:l7wmIQHoaGQW71dZMGXF5ahdt3

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d2a9df02513b3920ae70aa5e8d53331f4e497313cd3ea95704f8259ad658c30dN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections