General

  • Target

    30ae3ba3dbfd872e635e3904b74ac40a770de98963dc33e39268ec3f3871920eN

  • Size

    100KB

  • MD5

    f76784fd5fbd4d82678251645237a8d0

  • SHA1

    237a8ca16608be14d9f026d3eed0a5a52bb28bb0

  • SHA256

    30ae3ba3dbfd872e635e3904b74ac40a770de98963dc33e39268ec3f3871920e

  • SHA512

    5ff88edc639cc0f453dfffea48dc4725c98fa975bd7a892133db984d08690feb42b4d682337288b041bac6e4c981be22426faba37eb105b4850753d47f3e2ca2

  • SSDEEP

    3072:nbyOCT+Pf+5zNrro8eiQVsKbK0Bgb3a3+X13XRz:nOOCTHro8edzbK0O7aOl3Bz

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 30ae3ba3dbfd872e635e3904b74ac40a770de98963dc33e39268ec3f3871920eN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections