General

  • Target

    f96f261a9660fc114e13dc60a60f7ca459c3a5bd3f71a18101020621a1111b3cN

  • Size

    192KB

  • MD5

    94a2c82cb10eec7a5af448223eb3f700

  • SHA1

    2d237dabf405d613f2a57c68df5488f14ab00349

  • SHA256

    f96f261a9660fc114e13dc60a60f7ca459c3a5bd3f71a18101020621a1111b3c

  • SHA512

    02eb5c813d9eb5b58251868d7d58243436dbca926b5205a017720ab87c7984fc80973b45a61985569a7a22abdc220a80203058e2a3ecbf336cfe615e5ea804fb

  • SSDEEP

    3072:6kp3aGlAyHF5hIpyFyNgxFILAbWgVdmeS5pAgYIqGvJ6887lbyMGjXF1kqaholmI:Vp3aoAylNPFIcW2mdZMGXF5ahdtu

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f96f261a9660fc114e13dc60a60f7ca459c3a5bd3f71a18101020621a1111b3cN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections