General

  • Target

    26b881021dbef76d2441f0d961ace51f7b000b41905e4cd85900c4daf64894e2

  • Size

    109KB

  • MD5

    5ed2059ae6944d7adbd96b2067f9702d

  • SHA1

    0c41a6850dfc124ee3e14c53a8cb502dd2867f74

  • SHA256

    26b881021dbef76d2441f0d961ace51f7b000b41905e4cd85900c4daf64894e2

  • SHA512

    0d5059b9211508e528e0d7b8fd1a8815bb13cd420ee45c638eb45ce844549f6cdc1d16d7b7d922a7b3eafd043fcb9777ae7d4e3a56964ecaceb0a55f02d38d6b

  • SSDEEP

    3072:CNnPYDJSxQlcLjR9AX28KBGl2CVoJ9JLCqwzBu1DjHLMVDqqkSpR:CNnMgQlcLY2rwdoJ9xwtu1DjrFqhz

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 26b881021dbef76d2441f0d961ace51f7b000b41905e4cd85900c4daf64894e2
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections