General

  • Target

    8d803efed6b3fe0a773f4faf6d913341eae0f92195e042715aa09612a3b76594N

  • Size

    112KB

  • MD5

    905c9c9f8a29aa94a9595cb0d764bbb0

  • SHA1

    47cbb08acac3a1f5b8623a55feb1c245b304279b

  • SHA256

    8d803efed6b3fe0a773f4faf6d913341eae0f92195e042715aa09612a3b76594

  • SHA512

    26177ef6df052bd38b182312e723c8bc7efcfb40bb57756e349b5a9a33974431cd252234ce2bf6eada735b21886ef962ff39c0b0079131e85037b501c0dc13b8

  • SSDEEP

    3072:6v6CV7fgvMdhgZXeNmjPYBKkm+Gb+lc802eSQ:s6g3dADLkYylc856

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8d803efed6b3fe0a773f4faf6d913341eae0f92195e042715aa09612a3b76594N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections