General

  • Target

    a123cc1c06b7120f8956bd8b2ec1174169bdbc90fe5a023b9cc3d72df4f4b24a

  • Size

    161KB

  • MD5

    c0d8d205beee4ed0fb39422ae9affdcb

  • SHA1

    9eed736cebc8acde3921b9fb807142bdfa2b655c

  • SHA256

    a123cc1c06b7120f8956bd8b2ec1174169bdbc90fe5a023b9cc3d72df4f4b24a

  • SHA512

    4a0b78df9146ed7a0b3dc9d2b7410974084fd074e21b81fda3fc675dc92866a710d627b4ca9f0f2d41b90c39d251cfebcdaae540e8518f5a9babaacf826f1377

  • SSDEEP

    3072:zhaKwvxAPpMZnQkBVwtCJXeex7rrIRZK8K8/kvV:twuyZnQkBVwtmeetrIyRV

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a123cc1c06b7120f8956bd8b2ec1174169bdbc90fe5a023b9cc3d72df4f4b24a
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections