General

  • Target

    22d53e89ae50d05e0653409a3a88a0e60dddbe8bdfc6d2faceddd62d6a37320aN

  • Size

    198KB

  • MD5

    bd4a879a2796c238b748845a2131a4e0

  • SHA1

    be30a67b05ee0488e195ba05c514abc803e08bf8

  • SHA256

    22d53e89ae50d05e0653409a3a88a0e60dddbe8bdfc6d2faceddd62d6a37320a

  • SHA512

    2f3388ac08e47ab60b193f3389813e375e079ba62bf1b24c4c2e8845ec4172925c6236f877f5e9339a4508bf0906120c7475634d319588ec171fe5e6fa0907a7

  • SSDEEP

    3072:I5Z/o3dB29J4CAMrv1VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV+VVCVVVVVVVVE:oZ/+dB29JpY/2inBOHhkym/89bKws

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 22d53e89ae50d05e0653409a3a88a0e60dddbe8bdfc6d2faceddd62d6a37320aN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections