General

  • Target

    2f9ff2cdb19305aa0f8448fc51f4cc8b01a5b91b1192a4eab2a5ed8be71360a9N

  • Size

    217KB

  • MD5

    aa7e9bbedc06780ba80beba193239ea0

  • SHA1

    1122920cb75520e3caeb0e65fc388e6ead4ef0c4

  • SHA256

    2f9ff2cdb19305aa0f8448fc51f4cc8b01a5b91b1192a4eab2a5ed8be71360a9

  • SHA512

    eaed393824f896f4c4eb2f179324c36d61968fe0e0d63f476f76323867a141da56ce8f36f6f295d8e3ae4b033a251dc18783a878276c0f033b3029dacabf17a7

  • SSDEEP

    3072:JxSMLiLnHSK7ZhjrC7tMUeS5pAgYIqGvJ6887lbyMGjXF1kqaholmtbCQVD:fSdSeh+tMUdZMGXF5ahdt3

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f9ff2cdb19305aa0f8448fc51f4cc8b01a5b91b1192a4eab2a5ed8be71360a9N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections