General

  • Target

    c5a6a4ea27881f22298b06a2f73b5c3b46d60f4f07c4448f7b0837b987f7b2a1N

  • Size

    276KB

  • MD5

    da5e51209a84474a6986d9cced1390f0

  • SHA1

    0504faeaa6d1d2aa95547de7b2f056cbdd305f98

  • SHA256

    c5a6a4ea27881f22298b06a2f73b5c3b46d60f4f07c4448f7b0837b987f7b2a1

  • SHA512

    5872aa1cce04c852607486cff44d1af79adda6d9f2da6a96095e7aae6953464d948ebbd258c9f66b1741fb747b4d04a7fc7e30943a2297f7a4372c343ed628b5

  • SSDEEP

    6144:N9TiKLwaNwMDZM0dWZHEFJ7aWN1rtMsQBOSGaF+:/ThwaNwOB2HEGWN1RMs1S7

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c5a6a4ea27881f22298b06a2f73b5c3b46d60f4f07c4448f7b0837b987f7b2a1N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections