General

  • Target

    50bb93912e20ea1e9b75d4a7fbddc4b4412ceabc930dcdee45eb53ea60c6723bN

  • Size

    192KB

  • MD5

    f5764fc05b001fe687ee5f721c309fc0

  • SHA1

    0d589359e8016484d6ab9979ece1c0947e1cb667

  • SHA256

    50bb93912e20ea1e9b75d4a7fbddc4b4412ceabc930dcdee45eb53ea60c6723b

  • SHA512

    47cf78e5f7f55b5f13099880cd5d4512a0b01ab5c7d91a00bf93772a9ccc1a26db71d60608d3cfa8a1000c0d7cb3b1c74c3a923255f68138193b5e0ff88a9a9f

  • SSDEEP

    3072:fUXLlEWpJB/w3/3FJVeS5pAgYIqGvJ6887lbyMGjXF1kqaholmtbCj:8XxV4VdZMGXF5ahdtu

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 50bb93912e20ea1e9b75d4a7fbddc4b4412ceabc930dcdee45eb53ea60c6723bN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections