General

  • Target

    55b6d77114998e89779d64bf52329bb1d6d43fea447d74e7a1fd93dcbe71074fN

  • Size

    256KB

  • MD5

    b3f1be13e8b27b3e3d37b006df8e5d90

  • SHA1

    96b97d7e6d9f31f2a1b0e06d065ea9417f284275

  • SHA256

    55b6d77114998e89779d64bf52329bb1d6d43fea447d74e7a1fd93dcbe71074f

  • SHA512

    6cdd7ca001db8317f81d7903f5f85f6aa5e0d03ae9e78bc65b62d3655d4b48cad56f562422297153337d3e75246d4c57a30f1bb633a41ebf1a28f3c8857c1150

  • SSDEEP

    6144:UtLQJvBqD8AdV+tbFOLM77OLnFe3HCqxNRmJ4PavntM:ukvBqD6tsNePmjvtM

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 55b6d77114998e89779d64bf52329bb1d6d43fea447d74e7a1fd93dcbe71074fN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections