General

  • Target

    a82fee8309a384e25acb7816a2df294120cccb92e08ab9beb1f48ee9785c05e1N

  • Size

    128KB

  • MD5

    ddcea44727fa687587c833630bc8e070

  • SHA1

    673c8ad390dfd8de005c6496bfff91c0190dd856

  • SHA256

    a82fee8309a384e25acb7816a2df294120cccb92e08ab9beb1f48ee9785c05e1

  • SHA512

    49b656a3a5480482f88666482265fc41cd20345df5a74f24b4a11d4d03169528ea09e1f62c79ae95a47722846deedaa909fe41431ddc06ab5ff1c16d2f850da5

  • SSDEEP

    1536:FvSS86GR0jxSMmZ3NigfElzqbqfiNjw43/I+bwZG9o1nFzz3yjCQRawEDAJB8g:FKJ0lQ31DqfOzI+bwf1nFzwSAJB8g

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a82fee8309a384e25acb7816a2df294120cccb92e08ab9beb1f48ee9785c05e1N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections