General

  • Target

    4abb82daa3b99a92ff55174b84b22cbf9e8387743351989cdc8f219cc46ab230N

  • Size

    144KB

  • MD5

    fb82275db22feabb62027174ec393190

  • SHA1

    e5a5583c127412831e82d4e51d9b4dfc4ba75476

  • SHA256

    4abb82daa3b99a92ff55174b84b22cbf9e8387743351989cdc8f219cc46ab230

  • SHA512

    4b8a603bfc9c3878ea59047255da15d973fd3bfad944c326629ee3c9eb1f64eba031c85bba427432e3622de317bbe47a938a8f6b05a3bf7360b6625d01b5c8ae

  • SSDEEP

    3072:dAi0jfSalwgIocgb3a3+X13XRzrgHq/Wp+YmKfxgQL:dAiCwgIoZ7aOl3BzrUmKy0

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4abb82daa3b99a92ff55174b84b22cbf9e8387743351989cdc8f219cc46ab230N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections