General

  • Target

    4788b12c9fd7a33d4e87bd0f7d8389cf696c570df2c1dd80329d0e1f7bf6f69dN

  • Size

    256KB

  • MD5

    dd2c2ac5343ac631ac7205f29e33f7d0

  • SHA1

    d2ea21d2c7a1400906e662b90d5753a223c9cfe1

  • SHA256

    4788b12c9fd7a33d4e87bd0f7d8389cf696c570df2c1dd80329d0e1f7bf6f69d

  • SHA512

    1792a10a25528b96ce73817dcee657cf9f99a23a2b5b08016cdec754fd2a5bd03559c0ef199dd78c425e73524dfe5825e57031440b14b2b1a37a1d1f34009391

  • SSDEEP

    3072:rdpaaCd7NXW7+f8YeUcgQ1UkY1UkVHe1rUtst76UtoUtFVgtRQ2c+j:pCd7NXW7+XeUK1PY1PRe19V+j

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4788b12c9fd7a33d4e87bd0f7d8389cf696c570df2c1dd80329d0e1f7bf6f69dN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections