General

  • Target

    1c02bab7a0029461b3cfbdeee00cf5bbdaf759fecdf6ea02da7dd2890071babcN

  • Size

    121KB

  • MD5

    da231f55918fc5f10ab41b4cc60f7930

  • SHA1

    1094f3fa5d9dca2c6280dc5ff454129530178454

  • SHA256

    1c02bab7a0029461b3cfbdeee00cf5bbdaf759fecdf6ea02da7dd2890071babc

  • SHA512

    d4372d3eaa02524d4c45f684ac851626030fa34d6636c1dfeb4aa7a7c96782b98352644d0200f595cff84c6a1f886e07c2c21b9847760e4406129accb0e8ed87

  • SSDEEP

    3072:xVHhSTIWR48geZN4WcIDiYc/O7AJnD5tvv:/8dc/X/Oarvv

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c02bab7a0029461b3cfbdeee00cf5bbdaf759fecdf6ea02da7dd2890071babcN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections