General

  • Target

    3dbd409440974dd753bf1049867b4449696f2e5c5bd9819a49743e454e64c1b1N

  • Size

    144KB

  • MD5

    c5cc2027e2efb1744829e19bab268c20

  • SHA1

    c766ee9d1a8c14ceb52511de7893784e996a9fc5

  • SHA256

    3dbd409440974dd753bf1049867b4449696f2e5c5bd9819a49743e454e64c1b1

  • SHA512

    be2829b081325430c68c64241f505d476c430e1bdae5b6a7a51ab7d995af6ae189e0d2f764898a58e1a3fea13a07f8e8acfd027e8a03f14a8afa3fba27f06d44

  • SSDEEP

    3072:l77Zld2Gs7YldhxzYtGtEgCgHq/Wp+YmKfxgQdxvq:l7pIYldhBYtGtEgCUmKyIxi

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3dbd409440974dd753bf1049867b4449696f2e5c5bd9819a49743e454e64c1b1N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections