General

  • Target

    a3e80a04e7784483422d6d8b03091d11ff2c01835153c45daae14dce08f0514fN

  • Size

    217KB

  • MD5

    61c76cc2771500d87b58498111728890

  • SHA1

    62e74d426805c045e1a432a56301f076b146b57a

  • SHA256

    a3e80a04e7784483422d6d8b03091d11ff2c01835153c45daae14dce08f0514f

  • SHA512

    2e0fcee3ea98cf68dbbc291654de64f3fdd75c98c108626f27c65734bb9617fb49b5a54615b57b8a03333d8e53cfa4ce6e37c09129f77476cb319f8e65a411dc

  • SSDEEP

    3072:DwVp64OR5BL8hLaMpDoeS5pAgYIqGvJ6887lbyMGjXF1kqaholmtbCQVD:Dgg5BSacodZMGXF5ahdt3

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a3e80a04e7784483422d6d8b03091d11ff2c01835153c45daae14dce08f0514fN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections