General

  • Target

    554559f22b836ce9b7cee1da4a6be2bd9fe88feb80ff7bc6af1d236600a751e5N

  • Size

    207KB

  • MD5

    98295aca5205d8a329d17e71ab614e00

  • SHA1

    59d74aeaacbcc8c2f970ae114191e04c1c1b694f

  • SHA256

    554559f22b836ce9b7cee1da4a6be2bd9fe88feb80ff7bc6af1d236600a751e5

  • SHA512

    63aa1b7d098c6127972e11f2b9b27e771c9b265ceea89a964ec5885fda93fc91804bfb264eb8d03776243df524aee8444321e504e488416d4db1e0a672cf01dc

  • SSDEEP

    3072:wuGSHwPShJj0a7OxAXlKN1t9+javVjoSdoxx4KcWmjRrzyAyAtWgoJSWYVo2ASOC:0SU7xOK7FvVjj+VPj92d62ASOwj

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 554559f22b836ce9b7cee1da4a6be2bd9fe88feb80ff7bc6af1d236600a751e5N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections