General

  • Target

    ad9336e09fd61c8ab45745cf5257986f1f9c1e30f68a045c0d2b2af8cf33fa02N

  • Size

    256KB

  • MD5

    e4d4e8deafd859b2e7adde65e3a382f0

  • SHA1

    e4aa13c50b112a144e3330b8f2295b5d410c77f1

  • SHA256

    ad9336e09fd61c8ab45745cf5257986f1f9c1e30f68a045c0d2b2af8cf33fa02

  • SHA512

    6859fc2936f123880689f52d12225de1d7766bef2a13541191ba1afcf848b390d5bb5d370a4226335d8415cf9e5fec44c0230dcb5b91e31a60648b8910b452e4

  • SSDEEP

    3072:58uxN7JdgXLy6ANHarGEZH0n7J9TLCqwzBu1DjHLMVDqqkSpx+2:5JW7cN6rGEZHU7J9/wtu1DjrFqh

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad9336e09fd61c8ab45745cf5257986f1f9c1e30f68a045c0d2b2af8cf33fa02N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections