General

  • Target

    eaf344cde54273fc4a168f947a506b93e4c7ea8e7ecedaf9143a28f86573922dN

  • Size

    128KB

  • MD5

    6eb90dcad887a8bbeac03233a111e5e0

  • SHA1

    cce12110367b339dab0e311d4aebd28c5ab179a8

  • SHA256

    eaf344cde54273fc4a168f947a506b93e4c7ea8e7ecedaf9143a28f86573922d

  • SHA512

    6c6eebcfdc43f63a9c7ab5ab9ce5156986e6a03c781ae60043a9dc7cc6f3c59b272140d54f4cdde7e7243dc1e555262351cd5ec35465534c87c18b71ba534486

  • SSDEEP

    3072:JqRynjYXvh3dwqskgZPAbyZF+YOy+A8zdH13+EE+RaZ6r+GDZnr:ooj8m37AFYJ+A8zd5IF6rfBr

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eaf344cde54273fc4a168f947a506b93e4c7ea8e7ecedaf9143a28f86573922dN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections