General

  • Target

    9036c53ebba80129e58cc471b1ba190c0f17e88970b7c79f0fa34d762b284d96

  • Size

    207KB

  • MD5

    b5ded7dec3cee53870a2b868ec2b3b6e

  • SHA1

    52b2b9a0924d0ae32bac2f6cbaa99192d7929248

  • SHA256

    9036c53ebba80129e58cc471b1ba190c0f17e88970b7c79f0fa34d762b284d96

  • SHA512

    b4f2b0d47a004b836b4f3a2ac4a5148ac5901a7a20b574e5a71f9077f648f65dc88a54b650256e653af710652904109342a0188fe1e10c8b3dd4396af36fc2c0

  • SSDEEP

    3072:Qtvt6S3GT5WcAFXVVjoSdoxx4KcWmjRrzyAyAtWgoJSWYVo2ASOvojoS:Qtvt6S3mWcAdVVjj+VPj92d62ASOwj

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9036c53ebba80129e58cc471b1ba190c0f17e88970b7c79f0fa34d762b284d96
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections