General

  • Target

    13a50e85e38f46a38d8d853211b450cc4403cd7cf8a71c805a1fbfe7b68d715dN

  • Size

    128KB

  • MD5

    021c3afddd3667d42395b07822efe000

  • SHA1

    e5ae74e797529b08b084d7855da570af1749b1a8

  • SHA256

    13a50e85e38f46a38d8d853211b450cc4403cd7cf8a71c805a1fbfe7b68d715d

  • SHA512

    76918d2079cfd1f747c03893a49cc403fd8f82a3fa206337460b17afbd183e16b72419743dbf47ae85e687a3bf7856ab1799d285650a3e4a6bc53e1290d51257

  • SSDEEP

    3072:DPEDgeXjmk5hiRkikOaYvK2Ibwf1nFzwSAJB8g:DMsudcraYJJ1n6xJmg

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 13a50e85e38f46a38d8d853211b450cc4403cd7cf8a71c805a1fbfe7b68d715dN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections