General

  • Target

    256ac93b3b05d47413ff2a8dc197a86d95ed1ebe365d1a5b853d7c1c6e34215eN

  • Size

    123KB

  • MD5

    e59ed2a24066605648bcf066fe5d1f50

  • SHA1

    d52671f459f1cb9d8889fefa74367856ebcd88bd

  • SHA256

    256ac93b3b05d47413ff2a8dc197a86d95ed1ebe365d1a5b853d7c1c6e34215e

  • SHA512

    991dd8457ed9e4ece4cd96575742f73b0d3fe0b379c735bd0fa3d646d0efa82701cc304de055887e2f09877c5261fcd2db821cae9a0463cf6159fb9a502cb7d5

  • SSDEEP

    3072:fFnwdwkuR9O6vyKB1t5oBRYSa9rR85DEn5k7rRr:tnwdwdjygQB4rQD85k/Rr

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 256ac93b3b05d47413ff2a8dc197a86d95ed1ebe365d1a5b853d7c1c6e34215eN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections