General

  • Target

    1d2a8f6ad93b4c1808568570356f3176a94e8405f6ba88f537176b55154c2273N

  • Size

    100KB

  • MD5

    59d36709ae7d33f2c88a9a9e4a1bbcf0

  • SHA1

    b885d0ae58dd1d9c574a68e9dfabe15ac948e3c6

  • SHA256

    1d2a8f6ad93b4c1808568570356f3176a94e8405f6ba88f537176b55154c2273

  • SHA512

    fc64605caa73938327e4c49d0a440f92e0c300fb2e17b3632789f16507cdf6814c1ba5750ac280670cc5a0eaa0bd7d3dbe09dec3aab8ac5ffc3caf72deb376ad

  • SSDEEP

    3072:/v6YugJoJpTUAVRFRRRRRRRRRRRRRRGWgb3a3+X13XRz:H6YpJoUAhRRRRRRRRRRRRRRGP7aOl3Bz

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d2a8f6ad93b4c1808568570356f3176a94e8405f6ba88f537176b55154c2273N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections