General

  • Target

    dc528ac7796cb9dd156630432049be192ca070b8f92e1b36ebda54dbbac98e2e

  • Size

    211KB

  • MD5

    67cfa3fd20ff3f025a98a4914737b514

  • SHA1

    033d919d9ecfb5ff02f7b2b977a5037b7d316948

  • SHA256

    dc528ac7796cb9dd156630432049be192ca070b8f92e1b36ebda54dbbac98e2e

  • SHA512

    b9fb08584628fb3410958b73348f6d34e6cc4cfa2b2ca501a351f5a291fbbffb6cb15296398d64b94b2ca521a7021092f9a63d56b165645f0fafaaf896745ba9

  • SSDEEP

    6144:bN1MyUBnXEheYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/N:bN1UBnUheYr75lTefkY660fII

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dc528ac7796cb9dd156630432049be192ca070b8f92e1b36ebda54dbbac98e2e
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections