General

  • Target

    fe45876d59361960dd7fad7fd02ab5b503ebc7a21f11fcfc1fcd5110f649e2eaN

  • Size

    159KB

  • MD5

    a31e720dca4a5838e79b80ff27ea51e0

  • SHA1

    f50712e6587411cf3f930a631ef80bf85c27d6d9

  • SHA256

    fe45876d59361960dd7fad7fd02ab5b503ebc7a21f11fcfc1fcd5110f649e2ea

  • SHA512

    bf23b7983b46e56f82b2792a2a843c948799321da9c52c490c67c34e9ce14d136e1ccb264798028fda6677676069ed65cfabb6732fb2e6a9e4aa8d585dfc07f3

  • SSDEEP

    3072:s8JusPWyRn27Sgz4iqtubwf1nFzwSAJB8FgBY5nd/M9dA:s8J5WyRn27SLiKL1n6xJmPM9dA

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fe45876d59361960dd7fad7fd02ab5b503ebc7a21f11fcfc1fcd5110f649e2eaN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections