General

  • Target

    bed4e8220e550d58d2aef444ea3a242c685a6c85c22025e6488d5e213f4b4d67N

  • Size

    128KB

  • MD5

    cfdcc9ad8247275feed673d39f7bce20

  • SHA1

    1eeb695debac93e786edf782b737e0e7660aae1f

  • SHA256

    bed4e8220e550d58d2aef444ea3a242c685a6c85c22025e6488d5e213f4b4d67

  • SHA512

    049b9524487ff5bd8a3b9fd948aa80d52208b61ad31c31d3f8392429fe7bc27d104811351cd4ce8120ef7d44cae45e54c7539d0f53a0aa5ba7b6cddb1bcfd48e

  • SSDEEP

    3072:kj0I2bI8Wh6A5cDLVorDQTDd1AZoUBW3FJeRuaWNXmgu+tB:k+bI8WJcaEHdWZHEFJ7aWN1B

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bed4e8220e550d58d2aef444ea3a242c685a6c85c22025e6488d5e213f4b4d67N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections