General

  • Target

    433341bfd33dcb2d75c09528ffb0258d55d382470d5bcdbf3ae7c148442338a5N

  • Size

    109KB

  • MD5

    94d174360e82721b7a231a9f62fc5140

  • SHA1

    4c804a9fd32baee4838e13752b08b40bd70e6179

  • SHA256

    433341bfd33dcb2d75c09528ffb0258d55d382470d5bcdbf3ae7c148442338a5

  • SHA512

    c9b935fcab4c020a97b4596957dcf542f4c8cbdc7640d273fd1e294c72d1f3840ae8f7a4b5578fcd8a7b29e7aad05531822f940c3b24a320ba4f488f7691972f

  • SSDEEP

    3072:M6QL+06RNTEB2TB1hadxfmF+J9WLCqwzBu1DjHLMVDqqkSpR:M3Lx6RNTEyhadAwJ9ywtu1DjrFqhz

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 433341bfd33dcb2d75c09528ffb0258d55d382470d5bcdbf3ae7c148442338a5N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections