General

  • Target

    17f483461561852d0847c93cee5fa313808fdb6c075271a73969716293b04fc9

  • Size

    110KB

  • MD5

    a2014785ed4597171f1c742308c696da

  • SHA1

    55ac3bed360dd6d931b49bcb6aaa90d3f0791f83

  • SHA256

    17f483461561852d0847c93cee5fa313808fdb6c075271a73969716293b04fc9

  • SHA512

    eb620f8dc4cdb534b95abacd99e69538fd14f3b4c490feff48aa8c02714943bdf7c3689cbc7c69f98dce2bfe0205c42e9878cb9e794119b7eace6e77b5d33225

  • SSDEEP

    1536:RhCezRBnL/Rtkw9mh/zMAMCzoViPrGhC4MFTcTVB9t8BciDM8Vq9klcIXfMY:pPDP9mlB5zbPq04MqTLJiXSk6IXP

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 17f483461561852d0847c93cee5fa313808fdb6c075271a73969716293b04fc9
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections