General

  • Target

    9a55d2b7b354715e77affa2015a6dfd36a9f0aa4b72ec0eba6364dec4126c3b6N

  • Size

    110KB

  • MD5

    c2f793cb3e86d015e590e8f53d862a60

  • SHA1

    0e2a1a333ab412a34963c17623cecfbd1d2364cb

  • SHA256

    9a55d2b7b354715e77affa2015a6dfd36a9f0aa4b72ec0eba6364dec4126c3b6

  • SHA512

    8dc5937f5b3b5e57eb03f3dfb9fff651fd618c0d508f30cf03f648ab00d1c819b40c08df1171c07aa2f6c8bf3b435d562103b32a1412151baefedc1804ba986d

  • SSDEEP

    3072:gA5x1hPWtjYa3uA4Bx4kbiwhpcWtN0Hm4ClTLJiXSk6IXP:Jx1u73uT3DhhuWtNim4C4Sk6k

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9a55d2b7b354715e77affa2015a6dfd36a9f0aa4b72ec0eba6364dec4126c3b6N
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections