General

  • Target

    ba05f40d362fc7ca55e4ba6270022387798380ddacf26081a6bd35c00f7ff097N

  • Size

    205KB

  • MD5

    a00df65dbf088d1d573e15778db4c9a0

  • SHA1

    014e24ba50bc07c49ce9135226d8368afc624d17

  • SHA256

    ba05f40d362fc7ca55e4ba6270022387798380ddacf26081a6bd35c00f7ff097

  • SHA512

    167adfc83a4ac270f602ce5f9ffd3a570aae1f6470568ac4552d5fc56cd12017b5e62ae76f2c3118392fa083931b759646b2395d6908a8c700abdf936876d3be

  • SSDEEP

    6144:yFCtb7oRLBUs04tGyZ6YugQdjGG1wsKm6eBgdQbz:iCMLBUMGyXu1jGG1wsGeBg8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ba05f40d362fc7ca55e4ba6270022387798380ddacf26081a6bd35c00f7ff097N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections