General

  • Target

    0b3bbf24477aec12a471fb69a3b6b0901f3a5558f94e30616254b111425fdf21N

  • Size

    192KB

  • MD5

    b29803ceccede291efbac4d175f45ec0

  • SHA1

    150c4245ff58cbf1a6c50ab26e11399e38cc3cb3

  • SHA256

    0b3bbf24477aec12a471fb69a3b6b0901f3a5558f94e30616254b111425fdf21

  • SHA512

    e8ed7321f0ca68ecbd7c7c50f6bfd375257b80d6398a9600a57527ac6e04bcc51533cea9a455c9cd16021ed773c273331c386cd64f1724b243dadf31df4bbd51

  • SSDEEP

    1536:8uZ7dwZAyDVq7eBBfPATZMWI6ZmCzcKYSPnouy8O6Nuf51TQmQM22OwJwTa58nFz:8w7qZu7eB5PAOW7z1ZfoutkTy27zU

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b3bbf24477aec12a471fb69a3b6b0901f3a5558f94e30616254b111425fdf21N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections