General

  • Target

    748e3e2646e5c495d8f80407f20630406b8e4414aaea47a61b8cc0676f236e95N

  • Size

    144KB

  • MD5

    5fd323702b67f4251ccabc1482e401f0

  • SHA1

    300b26411492d10032b6694ab4b48bc9f39b94ff

  • SHA256

    748e3e2646e5c495d8f80407f20630406b8e4414aaea47a61b8cc0676f236e95

  • SHA512

    e6c1808317874947c3a02f8c74ddbd44f4920856a80fdbb6d6d9fc4cd8340ca1e6f8555c59c7a64ee8027548eff79ec20ffa8d660b66e1fbbf7200d496244f3f

  • SSDEEP

    1536:WR83X9wUo6vF3y+WlUjTJ/mb8x6ux0t7rQ40bMVDogHq/i352kPpchsLLXm9syTt:n9wUocpWgy7ggkgHq/Wp+YmKfxgQdxvq

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 748e3e2646e5c495d8f80407f20630406b8e4414aaea47a61b8cc0676f236e95N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections