General

  • Target

    2ac6fb2d324505e251bde9b53d496a4ebfd3350b934c2ef15eb44d908f26796eN

  • Size

    128KB

  • MD5

    d8e5ba8abd9243edcdb9131442b20400

  • SHA1

    8d7995c8d494d9d6c9aebc688cd8b181bb50a543

  • SHA256

    2ac6fb2d324505e251bde9b53d496a4ebfd3350b934c2ef15eb44d908f26796e

  • SHA512

    b0ce88639fbdd7e25d5e01d921efb1716f339b437c12aa0f30e10cdb125893b04642d69decd20d8f8b3163b9253875a6b3832e1569b5f687cde21dd4429a1b61

  • SSDEEP

    3072:drXRinihmehtz/BfW0Sb/BDd1AZoUBW3FJeRuaWNXmgu+tB:lXsaTtIb/ZdWZHEFJ7aWN1B

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2ac6fb2d324505e251bde9b53d496a4ebfd3350b934c2ef15eb44d908f26796eN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections