General

  • Target

    cdb5e35443547ae5fc4c75afe5bb4658a71d5b3ae34aa46ce973fac783065eedN

  • Size

    127KB

  • MD5

    fd7e8cd6ad85097d22cbd5b628e1e020

  • SHA1

    ecad0d1584a1421ddc31314a878d563d07f7724f

  • SHA256

    cdb5e35443547ae5fc4c75afe5bb4658a71d5b3ae34aa46ce973fac783065eed

  • SHA512

    5bd6e082763317daa7b9e9430afdabb98357d61f038ff8e741a5802d40b2a8a694165893d42c8a3ce644895104c5439d432b983408ced1c246edf472f3b21731

  • SSDEEP

    3072:HGIM3uGkdEUJNDX8ldx0YL5Eh3jZsII0660n:HxXG8EQIDUjZ1I066m

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cdb5e35443547ae5fc4c75afe5bb4658a71d5b3ae34aa46ce973fac783065eedN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections