General

  • Target

    f72ee39cb3b561f5bcfb1548d1a2a2573f0a036217ad600603e88164f38f2547N

  • Size

    108KB

  • MD5

    bf1dc0819e86412425f1a5028a7d3760

  • SHA1

    e090723e2ae629c85e0b0c20024f2bdfc6cc843c

  • SHA256

    f72ee39cb3b561f5bcfb1548d1a2a2573f0a036217ad600603e88164f38f2547

  • SHA512

    7acd9e2c5525da969216ad3376a82cae847fbfdf3d8692d757ff3163e379fbb1bdb027ec10e67bf274f199ca6b1a8c1cbba70d3ab040cfc913bfb47496d532b4

  • SSDEEP

    3072:zQ4C3pO5AYQUATU7NMowOc7a20FcFmKcUsvKwF:zQM5AYFATEEOSQUs

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f72ee39cb3b561f5bcfb1548d1a2a2573f0a036217ad600603e88164f38f2547N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections