General

  • Target

    a0665e29cd228410dc81755865072f8581a2af46a303adc40f0cdf637b87e160

  • Size

    110KB

  • MD5

    e714048a9f219fde9ef3efa891c51d02

  • SHA1

    dcbaf7a2cedf6edbc23a1e4a9758b78088b79cbd

  • SHA256

    a0665e29cd228410dc81755865072f8581a2af46a303adc40f0cdf637b87e160

  • SHA512

    9620012c4720084417ced6ab44a7e5d928e4b0bedce36c06c97e1fec44fff12a04398ede0226249645226d3debc0fbac23a64f8278bcd91fb81d56a139e03c9f

  • SSDEEP

    1536:4wD5+GYiZFL58Lqg1OS5/wy3jVIEbmMbM0b+TcTVB9t8BciDM8Vq9klcIXfMY:XhRv8LqShwyhIEDo0bxTLJiXSk6IXP

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a0665e29cd228410dc81755865072f8581a2af46a303adc40f0cdf637b87e160
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections