General

  • Target

    5da063f716b8abeaeb2cce7bcc1ddb885a44c094cc5e9f1bf1d702a57f744301

  • Size

    136KB

  • MD5

    ccb878caaf1f589333ee5efb05878ea0

  • SHA1

    13ae8ae63b4480006d49bf26524f837c5e1895d0

  • SHA256

    5da063f716b8abeaeb2cce7bcc1ddb885a44c094cc5e9f1bf1d702a57f744301

  • SHA512

    406ad08f227d49c1e666e860e5f765f44a42181c504add30f7c5add2fd4673ad7c884647670075200f9b8f1cb463e0cce1a346e8efea8ce7ad50584337d4e883

  • SSDEEP

    1536:TW4M7HDugBlBqpU2Gwa4fNPFA2HIsjvr3z/7HDPLXTfbnr3z/7KGat+ym6OC2Kew:m7jugBlYCwI2bTU0tA0ni/mjRrz3OT

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5da063f716b8abeaeb2cce7bcc1ddb885a44c094cc5e9f1bf1d702a57f744301
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections