General

  • Target

    d6c3f49e1aed57139ec42c28f46c5142c66dcf226b7a8bb2acb90e0ba24572ce

  • Size

    192KB

  • MD5

    a1fc72d11d1a496679b8b8cf0f0d4a20

  • SHA1

    a19a1d57532b0e45de546527fab04090c8a96b79

  • SHA256

    d6c3f49e1aed57139ec42c28f46c5142c66dcf226b7a8bb2acb90e0ba24572ce

  • SHA512

    f94506d0ee6552ce886b757c145dcf3642eaf326d8c4a4726877bd25ba790c1600baaf34d086e170a45b9620cf2f5ca67e4f9e96adc1a4bfa9a1f5621927e980

  • SSDEEP

    1536:kdiNy2O9eAVbquH/XJJkOZtJRlnouy8O6Nuf51TQmQM22OwJwTa58nFwWy0wtUwG:kEYuzMJJ/zJR9outkTy27zU

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d6c3f49e1aed57139ec42c28f46c5142c66dcf226b7a8bb2acb90e0ba24572ce
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections