General

  • Target

    ece680e6cc5b469dd94069e0da0349a823f0d4d369db5f24557456a7802a385cN

  • Size

    128KB

  • MD5

    ef6042ff67c52f63f297c4f63ec4e950

  • SHA1

    056564771fc97b73c53df5f97f2cb2df3b9fc62c

  • SHA256

    ece680e6cc5b469dd94069e0da0349a823f0d4d369db5f24557456a7802a385c

  • SHA512

    447aa5a467cc8b56ca0cad82bd97befd7b310fe0c95a79608df6cbbfe69b7eea28649aa94622b72e29d0bc5c055a661978045bc633d94459380eb152f8faf582

  • SSDEEP

    3072:o+CHaQcUauH87l3lpfAew03FQo7fnEBctcp:NG+7RlOew03FF7fPtc

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ece680e6cc5b469dd94069e0da0349a823f0d4d369db5f24557456a7802a385cN
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections