General

  • Target

    1854768457227b2198537d72c52a0b7e09446f47490a499de83c7c24500b299eN

  • Size

    128KB

  • MD5

    0074e1a5fd1482ddd3871500799b1870

  • SHA1

    b6c1adad9e1e3b1094cbaae672cacb96d2bd85da

  • SHA256

    1854768457227b2198537d72c52a0b7e09446f47490a499de83c7c24500b299e

  • SHA512

    edc4ee74518278df57570f4d0bf2a39cd289037c470bffcdd0d213c628e510e25f406216e63db385c3386b04175df44300d849808b17fd5181a72328426a2b80

  • SSDEEP

    3072:63FdwDS4wKCwOU/B0M/fDRl0Mi1cyzGYJpD9r8XxrYnQ0:+GwKCwOU/B0GfDRl0MCcIGyZ6Yl

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1854768457227b2198537d72c52a0b7e09446f47490a499de83c7c24500b299eN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections