General

  • Target

    788fb34ace8a89d05a752a3dabc02c5081c17c1b2e908bece6b872569915907aN

  • Size

    109KB

  • MD5

    a2b0be58bbd9fb5f1c609004afa602d0

  • SHA1

    f7101709a917265d520798a0f37389e76aa081b6

  • SHA256

    788fb34ace8a89d05a752a3dabc02c5081c17c1b2e908bece6b872569915907a

  • SHA512

    3291f52b4a45c63616336f915f32919c14b0c87d7385f5e869a61ae23197e418e5bea2c01afaefe86e87361a79740bc7d02a58e895e4f5e4b8b8036afa81aa9c

  • SSDEEP

    3072:xDna3wtGSsxZP3CPWqeJ9BLCqwzBu1DjHLMVDqqkSpR:ywtGSsxpyPWqeJ9Jwtu1DjrFqhz

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 788fb34ace8a89d05a752a3dabc02c5081c17c1b2e908bece6b872569915907aN
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections